ID de Prueba:	1.3.6.1.4.1.25623.1.0.55744
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: ruby, ruby_static
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: ruby ruby_static CVE-2005-2337 Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when Ruby processes a program through standard input (stdin). Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2337 http://lists.apple.com/archives/security-announce/2006/May/msg00003.html BugTraq ID: 14909 http://www.securityfocus.com/bid/14909 BugTraq ID: 17951 http://www.securityfocus.com/bid/17951 Cert/CC Advisory: TA06-132A http://www.us-cert.gov/cas/techalerts/TA06-132A.html CERT/CC vulnerability note: VU#160012 http://www.kb.cert.org/vuls/id/160012 Debian Security Information: DSA-860 (Google Search) http://www.debian.org/security/2005/dsa-860 Debian Security Information: DSA-862 (Google Search) http://www.debian.org/security/2005/dsa-862 Debian Security Information: DSA-864 (Google Search) http://www.debian.org/security/2005/dsa-864 http://www.gentoo.org/security/en/glsa/glsa-200510-05.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:191 http://jvn.jp/jp/JVN%2362914675/index.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10564 http://www.redhat.com/support/errata/RHSA-2005-799.html http://www.securitytracker.com/alerts/2005/Sep/1014948.html http://secunia.com/advisories/16904 http://secunia.com/advisories/17094 http://secunia.com/advisories/17098 http://secunia.com/advisories/17129 http://secunia.com/advisories/17147 http://secunia.com/advisories/17285 http://secunia.com/advisories/19130 http://secunia.com/advisories/20077 http://securityreason.com/securityalert/59 SuSE Security Announcement: SUSE-SR:2006:005 (Google Search) http://www.novell.com/linux/security/advisories/2006_05_sr.html http://www.ubuntu.com/usn/usn-195-1 http://www.vupen.com/english/advisories/2006/1779 XForce ISS Database: ruby-eval-security-bypass(22360) https://exchange.xforce.ibmcloud.com/vulnerabilities/22360
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.