ID de Prueba:	1.3.6.1.4.1.25623.1.0.54665
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 200409-08 (dev-lang/ruby)
Resumen:	The remote host is missing updates announced in;advisory GLSA 200409-08.
Descripción:	Summary: The remote host is missing updates announced in advisory GLSA 200409-08. Vulnerability Insight: When used for CGI scripting, Ruby creates session files in /tmp with the permissions of the default umask. Depending on that umask, local users may be able to read sensitive data stored in session files. Solution: All Ruby users should upgrade to the latest version: # emerge sync # emerge -pv '>=dev-lang/ruby-your_version' # emerge '>=dev-lang/ruby-your_version' CVSS Score: 2.1 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-0755 Debian Security Information: DSA-537 (Google Search) http://www.debian.org/security/2004/dsa-537 http://www.gentoo.org/security/en/glsa/glsa-200409-08.xml http://www.mandriva.com/security/advisories?name=MDKSA-2004:128 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11128 http://secunia.com/advisories/12290/ XForce ISS Database: ruby-filestore-pstore-insecure-permission(16996) https://exchange.xforce.ibmcloud.com/vulnerabilities/16996
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.