ID de Prueba:	1.3.6.1.4.1.25623.1.0.61994
Categoría:	CentOS Local Security Checks
Título:	CentOS Security Advisory CESA-2008:0562-01 (ruby)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates to ruby announced in advisory CESA-2008:0562-01. For details on the issues addressed in this update, please visit the referenced security advisories. Solution: Update the appropriate packages on your system. http://www.securityspace.com/smysecure/catid.html?in=CESA-2008:0562-01 http://www.securityspace.com/smysecure/catid.html?in=RHSA-2008:0562 https://rhn.redhat.com/errata/rh21as-errata.html Risk factor : Critical CVSS Score: 10.0
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2008-2663 http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html BugTraq ID: 29903 http://www.securityfocus.com/bid/29903 Bugtraq: 20080626 rPSA-2008-0206-1 ruby (Google Search) http://www.securityfocus.com/archive/1/493688/100/0/threaded Debian Security Information: DSA-1612 (Google Search) http://www.debian.org/security/2008/dsa-1612 Debian Security Information: DSA-1618 (Google Search) http://www.debian.org/security/2008/dsa-1618 https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00937.html http://security.gentoo.org/glsa/glsa-200812-17.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:140 http://www.mandriva.com/security/advisories?name=MDVSA-2008:141 http://www.mandriva.com/security/advisories?name=MDVSA-2008:142 http://blog.phusion.nl/2008/06/23/ruby-186-p230187-broke-your-app-ruby-enterprise-edition-to-the-rescue/ http://weblog.rubyonrails.org/2008/6/21/multiple-ruby-security-vulnerabilities http://www.matasano.com/log/1070/updates-on-drew-yaos-terrible-ruby-vulnerabilities/ http://www.ruby-forum.com/topic/157034 http://www.rubyinside.com/june-2008-ruby-security-vulnerabilities-927.html http://www.zedshaw.com/rants/the_big_ruby_vulnerabilities.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10524 http://www.redhat.com/support/errata/RHSA-2008-0561.html http://www.securitytracker.com/id?1020347 http://secunia.com/advisories/30802 http://secunia.com/advisories/30831 http://secunia.com/advisories/30867 http://secunia.com/advisories/30875 http://secunia.com/advisories/30894 http://secunia.com/advisories/31062 http://secunia.com/advisories/31090 http://secunia.com/advisories/31181 http://secunia.com/advisories/31256 http://secunia.com/advisories/31687 http://secunia.com/advisories/33178 http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.429562 SuSE Security Announcement: SUSE-SR:2008:017 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html http://www.ubuntu.com/usn/usn-621-1 http://www.vupen.com/english/advisories/2008/1907/references http://www.vupen.com/english/advisories/2008/1981/references XForce ISS Database: ruby-rbarystore-code-execution(43346) https://exchange.xforce.ibmcloud.com/vulnerabilities/43346 Common Vulnerability Exposure (CVE) ID: CVE-2008-2664 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9646 XForce ISS Database: ruby-rbstrformat-code-execution(43348) https://exchange.xforce.ibmcloud.com/vulnerabilities/43348 Common Vulnerability Exposure (CVE) ID: CVE-2008-2725 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-2727 http://www.redhat.com/archives/fedora-security-commits/2008-June/msg00005.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9606 XForce ISS Database: ruby-rbarysplice-code-execution(43350) https://exchange.xforce.ibmcloud.com/vulnerabilities/43350 Common Vulnerability Exposure (CVE) ID: CVE-2008-2726 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9959 XForce ISS Database: ruby-rbarysplice-begrlen-code-execution(43351) https://exchange.xforce.ibmcloud.com/vulnerabilities/43351 Common Vulnerability Exposure (CVE) ID: CVE-2006-6303 http://lists.apple.com/archives/security-announce/2007/May/msg00004.html BugTraq ID: 21441 http://www.securityfocus.com/bid/21441 http://security.gentoo.org/glsa/glsa-200612-21.xml http://jvn.jp/jp/JVN%2384798830/index.html http://www.mandriva.com/security/advisories?name=MDKSA-2006:225 http://bugs.gentoo.org/show_bug.cgi?id=157048 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=218287 http://www.ruby-lang.org/cgi-bin/cvsweb.cgi/ruby/lib/cgi.rb.diff?f=h&only_with_tag=MAIN&r1=text&tr1=1.92&r2=text&tr2=1.91 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10529 http://www.redhat.com/support/errata/RHSA-2007-0961.html http://securitytracker.com/id?1017363 http://secunia.com/advisories/23165 http://secunia.com/advisories/23268 http://secunia.com/advisories/23454 http://secunia.com/advisories/25402 http://secunia.com/advisories/27576 SuSE Security Announcement: SUSE-SR:2007:004 (Google Search) http://www.novell.com/linux/security/advisories/2007_4_sr.html http://www.ubuntu.com/usn/usn-394-1 http://www.vupen.com/english/advisories/2006/4855 http://www.vupen.com/english/advisories/2007/1939 XForce ISS Database: ruby-cgi-library-dos(30734) https://exchange.xforce.ibmcloud.com/vulnerabilities/30734 Common Vulnerability Exposure (CVE) ID: CVE-2008-2376 20080708 rPSA-2008-0218-1 ruby http://www.securityfocus.com/archive/1/494104/100/0/threaded 30927 http://secunia.com/advisories/30927 31006 http://secunia.com/advisories/31006 31062 31090 31181 31256 32219 http://secunia.com/advisories/32219 33178 ADV-2008-2584 http://www.vupen.com/english/advisories/2008/2584 APPLE-SA-2008-09-15 http://lists.apple.com/archives/security-announce//2008/Sep/msg00005.html DSA-1612 DSA-1618 FEDORA-2008-6033 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00112.html FEDORA-2008-6094 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00161.html GLSA-200812-17 MDVSA-2008:140 MDVSA-2008:141 MDVSA-2008:142 RHSA-2008:0561 TA08-260A http://www.us-cert.gov/cas/techalerts/TA08-260A.html USN-651-1 https://usn.ubuntu.com/651-1/ [oss-security] 20080702 More ruby integer overflows (rb_ary_fill / Array#fill) http://www.openwall.com/lists/oss-security/2008/07/02/3 http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=17756 http://wiki.rpath.com/Advisories:rPSA-2008-0218 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0218 https://issues.rpath.com/browse/RPL-2639 oval:org.mitre.oval:def:9863 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9863
Copyright	Copyright (c) 2008 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.