ID de Prueba:	1.3.6.1.4.1.25623.1.0.801375
Categoría:	Buffer overflow
Título:	Ruby 'ARGF.inplace_mode' Buffer Overflow Vulnerability
Resumen:	Ruby is prone to a buffer overflow vulnerability.
Descripción:	Summary: Ruby is prone to a buffer overflow vulnerability. Vulnerability Insight: The flaw caused by improper bounds checking when handling filenames on Windows systems. It is not properly validating value assigned to the 'ARGF.inplace_mode' variable. Vulnerability Impact: Successful exploitation will allow local attackers to cause buffer overflow and execute arbitrary code on the system or cause the application to crash. Affected Software/OS: Ruby version 1.9.x before 1.9.1-p429 on Windows. Solution: Upgrade to Ruby version 1.9.1-p429 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2489 BugTraq ID: 41321 http://www.securityfocus.com/bid/41321 http://www.openwall.com/lists/oss-security/2010/07/02/1 http://www.openwall.com/lists/oss-security/2010/07/02/10 http://osdir.com/ml/ruby-talk/2010-07/msg00095.html http://www.osvdb.org/66040 http://secunia.com/advisories/40442 XForce ISS Database: ruby-argfinplacemode-bo(60135) https://exchange.xforce.ibmcloud.com/vulnerabilities/60135
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.