Test ID:	1.3.6.1.4.1.25623.1.0.54319
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-748-1)
Summary:	The remote host is missing an update for the Debian 'ruby1.8' package(s) announced via the DSA-748-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'ruby1.8' package(s) announced via the DSA-748-1 advisory. Vulnerability Insight: A vulnerability has been discovered in ruby1.8 that could allow arbitrary command execution on a server running the ruby xmlrpc server. The old stable distribution (woody) did not include ruby1.8. This problem is fixed for the current stable distribution (sarge) in version 1.8.2-7sarge1. This problem is fixed for the unstable distribution in version 1.8.2-8. We recommend that you upgrade your ruby1.8 package. Affected Software/OS: 'ruby1.8' package(s) on Debian 3.1. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-1992 14016 http://www.securityfocus.com/bid/14016 16920 http://secunia.com/advisories/16920/ APPLE-SA-2005-09-22 http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html DSA-748 http://www.debian.org/security/2005/dsa-748 ESB-2005.0732 http://www.auscert.org.au/5509 P-312 http://www.ciac.org/ciac/bulletins/p-312.shtml RHSA-2005:543 http://www.redhat.com/support/errata/RHSA-2005-543.html SUSE-SR:2005:018 http://www.novell.com/linux/security/advisories/2005_18_sr.html VU#684913 http://www.kb.cert.org/vuls/id/684913 http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-core/5237 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=315064 http://www2.ruby-lang.org/en/20050701.html oval:org.mitre.oval:def:10819 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10819
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.