Test ID:	1.3.6.1.4.1.25623.1.0.55591
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-862-1)
Summary:	The remote host is missing an update for the Debian 'ruby1.6' package(s) announced via the DSA-862-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'ruby1.6' package(s) announced via the DSA-862-1 advisory. Vulnerability Insight: Yutaka Oiwa discovered a bug in Ruby, the interpreter for the object-oriented scripting language, that can cause illegal program code to bypass the safe level and taint flag protections check and be executed. The following matrix lists the fixed versions in our distributions: old stable (woody) stable (sarge) unstable (sid) ruby 1.6.7-3woody5 n/a n/a ruby1.6 n/a 1.6.8-12sarge1 1.6.8-13 ruby1.8 n/a 1.8.2-7sarge2 1.8.3-1 We recommend that you upgrade your ruby packages. Affected Software/OS: 'ruby1.6' package(s) on Debian 3.1. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2005-2337 http://lists.apple.com/archives/security-announce/2006/May/msg00003.html BugTraq ID: 14909 http://www.securityfocus.com/bid/14909 BugTraq ID: 17951 http://www.securityfocus.com/bid/17951 Cert/CC Advisory: TA06-132A http://www.us-cert.gov/cas/techalerts/TA06-132A.html CERT/CC vulnerability note: VU#160012 http://www.kb.cert.org/vuls/id/160012 Debian Security Information: DSA-860 (Google Search) http://www.debian.org/security/2005/dsa-860 Debian Security Information: DSA-862 (Google Search) http://www.debian.org/security/2005/dsa-862 Debian Security Information: DSA-864 (Google Search) http://www.debian.org/security/2005/dsa-864 http://www.gentoo.org/security/en/glsa/glsa-200510-05.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:191 http://jvn.jp/jp/JVN%2362914675/index.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10564 http://www.redhat.com/support/errata/RHSA-2005-799.html http://www.securitytracker.com/alerts/2005/Sep/1014948.html http://secunia.com/advisories/16904 http://secunia.com/advisories/17094 http://secunia.com/advisories/17098 http://secunia.com/advisories/17129 http://secunia.com/advisories/17147 http://secunia.com/advisories/17285 http://secunia.com/advisories/19130 http://secunia.com/advisories/20077 http://securityreason.com/securityalert/59 SuSE Security Announcement: SUSE-SR:2006:005 (Google Search) http://www.novell.com/linux/security/advisories/2006_05_sr.html http://www.ubuntu.com/usn/usn-195-1 http://www.vupen.com/english/advisories/2006/1779 XForce ISS Database: ruby-eval-security-bypass(22360) https://exchange.xforce.ibmcloud.com/vulnerabilities/22360
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.