CVE ID:	CVE-2005-1992
Description:	The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands.
Test IDs:	1.3.6.1.4.1.25623.1.0.53083   1.3.6.1.4.1.25623.1.0.65620   1.3.6.1.4.1.25623.1.0.53092   1.3.6.1.4.1.25623.1.0.54986   1.3.6.1.4.1.25623.1.0.53084   1.3.6.1.4.1.25623.1.0.54486   1.3.6.1.4.1.25623.1.0.54319   1.3.6.1.4.1.25623.1.0.53873   1.3.6.1.4.1.25623.1.0.54342   1.3.6.1.4.1.25623.1.0.55074   1.3.6.1.4.1.25623.1.0.53971
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1992 14016 http://www.securityfocus.com/bid/14016 16920 http://secunia.com/advisories/16920/ APPLE-SA-2005-09-22 http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html DSA-748 http://www.debian.org/security/2005/dsa-748 ESB-2005.0732 http://www.auscert.org.au/5509 P-312 http://www.ciac.org/ciac/bulletins/p-312.shtml RHSA-2005:543 http://www.redhat.com/support/errata/RHSA-2005-543.html SUSE-SR:2005:018 http://www.novell.com/linux/security/advisories/2005_18_sr.html VU#684913 http://www.kb.cert.org/vuls/id/684913 http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-core/5237 http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-core/5237 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=315064 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=315064 http://www2.ruby-lang.org/en/20050701.html http://www2.ruby-lang.org/en/20050701.html oval:org.mitre.oval:def:10819 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10819