Test ID:	1.3.6.1.4.1.25623.1.0.60010
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-1431-1)
Summary:	The remote host is missing an update for the Debian 'ruby-gnome2' package(s) announced via the DSA-1431-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'ruby-gnome2' package(s) announced via the DSA-1431-1 advisory. Vulnerability Insight: It was discovered that ruby-gnome2, the GNOME-related bindings for the Ruby language, didn't properly sanitize input prior to constructing dialogs. This could allow the execution of arbitrary code if untrusted input is displayed within a dialog. For the old stable distribution (sarge), this problem has been fixed in version 0.12.0-2sarge1. For the stable distribution (etch), this problem has been fixed in version 0.15.0-1.1etch1. For the unstable distribution (sid), this problem has been fixed in version 0.16.0-10. We recommend that you upgrade your ruby-gnome2 package. Affected Software/OS: 'ruby-gnome2' package(s) on Debian 3.1, Debian 4. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-6183 BugTraq ID: 26616 http://www.securityfocus.com/bid/26616 Bugtraq: 20071127 Ruby/Gnome2 0.16.0 Format String Vulnerability (Google Search) http://www.securityfocus.com/archive/1/484240/100/0/threaded Debian Security Information: DSA-1431 (Google Search) http://www.debian.org/security/2007/dsa-1431 https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00214.html https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00251.html http://security.gentoo.org/glsa/glsa-200712-09.xml http://www.mandriva.com/security/advisories?name=MDVSA-2008:033 http://em386.blogspot.com/2007/11/your-favorite-better-than-c-scripting.html https://bugzilla.redhat.com/show_bug.cgi?id=402871 http://osvdb.org/40774 http://secunia.com/advisories/27825 http://secunia.com/advisories/27975 http://secunia.com/advisories/28022 http://secunia.com/advisories/28060 http://securityreason.com/securityalert/3407 http://www.vupen.com/english/advisories/2007/4022 XForce ISS Database: rubygnome2-mdiaginitialize-format-string(38757) https://exchange.xforce.ibmcloud.com/vulnerabilities/38757
Copyright	Copyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.