CVE ID:	CVE-2011-3009
Description:	Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900.
Test IDs:	1.3.6.1.4.1.25623.1.0.902559   1.3.6.1.4.1.25623.1.1.4.2012.0147.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3009 BugTraq ID: 49126 http://www.securityfocus.com/bid/49126 http://redmine.ruby-lang.org/issues/show/4338 http://www.openwall.com/lists/oss-security/2011/07/20/1 RedHat Security Advisories: RHSA-2011:1581 http://www.redhat.com/support/errata/RHSA-2011-1581.html RedHat Security Advisories: RHSA-2012:0070 http://rhn.redhat.com/errata/RHSA-2012-0070.html XForce ISS Database: ruby-random-number-weak-security(69157) https://exchange.xforce.ibmcloud.com/vulnerabilities/69157