Búsqueda de    
Vulnerabilidad   
    Buscar 219043 Descripciones CVE y
99761 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.55569
Categoría:Red Hat Local Security Checks
Título:RedHat Security Advisory RHSA-2005:799
Resumen:NOSUMMARY
Descripción:Description:

The remote host is missing updates announced in
advisory RHSA-2005:799.

Ruby is an interpreted scripting language for object-oriented programming.

A bug was found in the way ruby handles eval statements. It is possible for
a malicious script to call eval in such a way that can allow the bypass of
certain safe-level restrictions. The Common Vulnerabilities and Exposures
project (cve.mitre.org) has assigned the name CVE-2005-2337 to this issue.

Users of Ruby should update to these erratum packages, which contain a
backported patch and are not vulnerable to this issue.

Solution:
Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date

http://rhn.redhat.com/errata/RHSA-2005-799.html

Risk factor : High

CVSS Score:
7.5

Referencia Cruzada: BugTraq ID: 17951
BugTraq ID: 14909
Common Vulnerability Exposure (CVE) ID: CVE-2005-2337
http://lists.apple.com/archives/security-announce/2006/May/msg00003.html
http://www.securityfocus.com/bid/14909
http://www.securityfocus.com/bid/17951
Cert/CC Advisory: TA06-132A
http://www.us-cert.gov/cas/techalerts/TA06-132A.html
CERT/CC vulnerability note: VU#160012
http://www.kb.cert.org/vuls/id/160012
Debian Security Information: DSA-860 (Google Search)
http://www.debian.org/security/2005/dsa-860
Debian Security Information: DSA-862 (Google Search)
http://www.debian.org/security/2005/dsa-862
Debian Security Information: DSA-864 (Google Search)
http://www.debian.org/security/2005/dsa-864
http://www.gentoo.org/security/en/glsa/glsa-200510-05.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2005:191
http://jvn.jp/jp/JVN%2362914675/index.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10564
http://www.redhat.com/support/errata/RHSA-2005-799.html
http://www.securitytracker.com/alerts/2005/Sep/1014948.html
http://secunia.com/advisories/16904
http://secunia.com/advisories/17094
http://secunia.com/advisories/17098
http://secunia.com/advisories/17129
http://secunia.com/advisories/17147
http://secunia.com/advisories/17285
http://secunia.com/advisories/19130
http://secunia.com/advisories/20077
http://securityreason.com/securityalert/59
SuSE Security Announcement: SUSE-SR:2006:005 (Google Search)
http://www.novell.com/linux/security/advisories/2006_05_sr.html
http://www.ubuntu.com/usn/usn-195-1
http://www.vupen.com/english/advisories/2006/1779
XForce ISS Database: ruby-eval-security-bypass(22360)
https://exchange.xforce.ibmcloud.com/vulnerabilities/22360
CopyrightCopyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2024 E-Soft Inc. Todos los derechos reservados.