ID de Prueba:	1.3.6.1.4.1.25623.1.0.57129
Categoría:	Red Hat Local Security Checks
Título:	RedHat Security Advisory RHSA-2006:0604
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory RHSA-2006:0604. Ruby is an interpreted scripting language for object-oriented programming. A number of flaws were found in the safe-level restrictions in Ruby. It was possible for an attacker to create a carefully crafted malicious script that can allow the bypass of certain safe-level restrictions. (CVE-2006-3694) Users of Ruby should update to these erratum packages, which contain a backported patch and are not vulnerable to this issue. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date http://rhn.redhat.com/errata/RHSA-2006-0604.html http://www.redhat.com/security/updates/classification/#moderate Risk factor : High CVSS Score: 6.4
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-3694 BugTraq ID: 18944 http://www.securityfocus.com/bid/18944 Debian Security Information: DSA-1139 (Google Search) http://www.debian.org/security/2006/dsa-1139 Debian Security Information: DSA-1157 (Google Search) http://www.debian.org/security/2006/dsa-1157 http://jvn.jp/jp/JVN%2313947696/index.html http://jvn.jp/jp/JVN%2383768862/index.html http://www.mandriva.com/security/advisories?name=MDKSA-2006:134 http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003907.html http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003915.html http://www.osvdb.org/27144 http://www.osvdb.org/27145 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9983 http://www.redhat.com/support/errata/RHSA-2006-0604.html http://secunia.com/advisories/21009 http://secunia.com/advisories/21233 http://secunia.com/advisories/21236 http://secunia.com/advisories/21272 http://secunia.com/advisories/21337 http://secunia.com/advisories/21598 http://secunia.com/advisories/21657 http://secunia.com/advisories/21749 SGI Security Advisory: 20060801-01-P ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P SuSE Security Announcement: SUSE-SR:2006:021 (Google Search) http://www.novell.com/linux/security/advisories/2006_21_sr.html http://www.ubuntu.com/usn/usn-325-1 http://www.vupen.com/english/advisories/2006/2760 XForce ISS Database: ruby-alias-directory-security-bypass(27725) https://exchange.xforce.ibmcloud.com/vulnerabilities/27725
Copyright	Copyright (c) 2006 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.