Test ID:	1.3.6.1.4.1.25623.1.0.64162
Category:	Ubuntu Local Security Checks
Title:	Ubuntu USN-691-1 (ruby1.9)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to ruby1.9 announced via advisory USN-691-1. Details follow: Laurent Gaffie discovered that Ruby did not properly check for memory allocation failures. If a user or automated system were tricked into running a malicious script, an attacker could cause a denial of service. (CVE-2008-3443) This update also fixes a regression in the upstream patch previously applied to fix CVE-2008-3790. The regression would cause parsing of some XML documents to fail. Solution: The problem can be corrected by upgrading your system to the following package versions: Ubuntu 8.10: ruby1.9 1.9.0.2-7ubuntu1.1 In general, a standard system upgrade is sufficient to effect the necessary changes. http://www.securityspace.com/smysecure/catid.html?in=USN-691-1 Risk factor : Critical CVSS Score: 10.0
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3443 http://lists.apple.com/archives/security-announce/2009/May/msg00002.html BugTraq ID: 30682 http://www.securityfocus.com/bid/30682 Cert/CC Advisory: TA09-133A http://www.us-cert.gov/cas/techalerts/TA09-133A.html Debian Security Information: DSA-1695 (Google Search) http://www.debian.org/security/2009/dsa-1695 https://www.exploit-db.com/exploits/6239 https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9570 http://www.redhat.com/support/errata/RHSA-2008-0895.html http://www.redhat.com/support/errata/RHSA-2008-0897.html http://www.securitytracker.com/id?1021075 http://secunia.com/advisories/31430 http://secunia.com/advisories/32165 http://secunia.com/advisories/32219 http://secunia.com/advisories/32371 http://secunia.com/advisories/32372 http://secunia.com/advisories/33185 http://secunia.com/advisories/33398 http://secunia.com/advisories/35074 http://securityreason.com/securityalert/4158 https://usn.ubuntu.com/651-1/ https://usn.ubuntu.com/691-1/ http://www.vupen.com/english/advisories/2009/1297 XForce ISS Database: ruby-regex-dos(44688) https://exchange.xforce.ibmcloud.com/vulnerabilities/44688 Common Vulnerability Exposure (CVE) ID: CVE-2008-3790 BugTraq ID: 30802 http://www.securityfocus.com/bid/30802 Debian Security Information: DSA-1651 (Google Search) http://www.debian.org/security/2008/dsa-1651 Debian Security Information: DSA-1652 (Google Search) http://www.debian.org/security/2008/dsa-1652 http://security.gentoo.org/glsa/glsa-200812-17.xml http://groups.google.com/group/comp.lang.ruby/browse_thread/thread/19f69e8a081fc0d1/e138e014b74352ca http://www.openwall.com/lists/oss-security/2008/08/25/4 http://www.openwall.com/lists/oss-security/2008/08/26/1 http://www.openwall.com/lists/oss-security/2008/08/26/4 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10393 http://www.securitytracker.com/id?1020735 http://secunia.com/advisories/31602 http://secunia.com/advisories/32255 http://secunia.com/advisories/32256 http://secunia.com/advisories/33178 http://www.vupen.com/english/advisories/2008/2428 http://www.vupen.com/english/advisories/2008/2483 XForce ISS Database: ruby-rexml-dos(44628) https://exchange.xforce.ibmcloud.com/vulnerabilities/44628 Common Vulnerability Exposure (CVE) ID: CVE-2008-1094 Bugtraq: 20081216 CVE-2008-1094 - Barracuda Span Firewall SQL Injection Vulnerability (Google Search) http://www.securityfocus.com/archive/1/499293/100/0/threaded https://www.exploit-db.com/exploits/7496 http://dcsl.ul.ie/advisories/02.htm http://securitytracker.com/id?1021455 http://secunia.com/advisories/33164 http://securityreason.com/securityalert/4793 Common Vulnerability Exposure (CVE) ID: CVE-2008-0971 Bugtraq: 20081216 CVE-2008-0971 - Barracuda Networks products Multiple Cross-Site Scripting Vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/499294/100/0/threaded http://dcsl.ul.ie/advisories/03.htm http://www.osvdb.org/50709 http://securitytracker.com/id?1021454 http://securityreason.com/securityalert/4792 Common Vulnerability Exposure (CVE) ID: CVE-2008-4122 Bugtraq: 20081216 Joomla: Session hijacking vulnerability, CVE-2008-4122 (Google Search) http://www.securityfocus.com/archive/1/499295/100/0/threaded Bugtraq: 20081218 Re: Joomla: Session hijacking vulnerability, CVE-2008-4122 (Google Search) http://www.securityfocus.com/archive/1/499354/100/0/threaded http://int21.de/cve/CVE-2008-4122-joomla.html http://securityreason.com/securityalert/4794 Common Vulnerability Exposure (CVE) ID: CVE-2007-2126 BugTraq ID: 23532 http://www.securityfocus.com/bid/23532 Cert/CC Advisory: TA07-108A http://www.us-cert.gov/cas/techalerts/TA07-108A.html HPdes Security Advisory: HPSBMA02133 http://www.securityfocus.com/archive/1/466329/100/200/threaded HPdes Security Advisory: SSRT061201 http://www.integrigy.com/security-resources/analysis/Integrigy_Oracle_CPU_April_2007_Analysis.pdf http://www.red-database-security.com/advisory/oracle_cpu_apr_2007.html http://www.securitytracker.com/id?1017927 http://www.vupen.com/english/advisories/2007/1426 Common Vulnerability Exposure (CVE) ID: CVE-2008-5500 1021417 http://www.securitytracker.com/id?1021417 256408 http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 258748 http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 32882 http://www.securityfocus.com/bid/32882 33184 http://secunia.com/advisories/33184 33188 http://secunia.com/advisories/33188 33189 http://secunia.com/advisories/33189 33203 http://secunia.com/advisories/33203 33204 http://secunia.com/advisories/33204 33205 http://secunia.com/advisories/33205 33216 http://secunia.com/advisories/33216 33231 http://secunia.com/advisories/33231 33232 http://secunia.com/advisories/33232 33408 http://secunia.com/advisories/33408 33415 http://secunia.com/advisories/33415 33421 http://secunia.com/advisories/33421 33433 http://secunia.com/advisories/33433 33434 http://secunia.com/advisories/33434 33523 http://secunia.com/advisories/33523 33547 http://secunia.com/advisories/33547 34501 http://secunia.com/advisories/34501 35080 http://secunia.com/advisories/35080 ADV-2009-0977 http://www.vupen.com/english/advisories/2009/0977 DSA-1696 http://www.debian.org/security/2009/dsa-1696 DSA-1697 http://www.debian.org/security/2009/dsa-1697 DSA-1704 http://www.debian.org/security/2009/dsa-1704 DSA-1707 http://www.debian.org/security/2009/dsa-1707 MDVSA-2008:244 http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 MDVSA-2008:245 http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 MDVSA-2009:012 http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 RHSA-2008:1036 http://www.redhat.com/support/errata/RHSA-2008-1036.html RHSA-2008:1037 http://www.redhat.com/support/errata/RHSA-2008-1037.html RHSA-2009:0002 http://www.redhat.com/support/errata/RHSA-2009-0002.html USN-690-1 https://usn.ubuntu.com/690-1/ USN-690-2 http://www.ubuntu.com/usn/usn-690-2 USN-690-3 https://usn.ubuntu.com/690-3/ USN-701-1 http://www.ubuntu.com/usn/usn-701-1 USN-701-2 http://www.ubuntu.com/usn/usn-701-2 http://www.mozilla.org/security/announce/2008/mfsa2008-60.html https://bugzilla.mozilla.org/show_bug.cgi?id=460803 https://bugzilla.mozilla.org/show_bug.cgi?id=464998 mozilla-layout-code-execution-var3(47406) https://exchange.xforce.ibmcloud.com/vulnerabilities/47406 oval:org.mitre.oval:def:11053 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11053 Common Vulnerability Exposure (CVE) ID: CVE-2008-5503 1021424 http://www.securitytracker.com/id?1021424 http://www.mozilla.org/security/announce/2008/mfsa2008-61.html https://bugzilla.mozilla.org/show_bug.cgi?id=379959 mozilla-xbl-information-disclosure(47409) https://exchange.xforce.ibmcloud.com/vulnerabilities/47409 oval:org.mitre.oval:def:11423 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11423 Common Vulnerability Exposure (CVE) ID: CVE-2008-5504 1021422 http://www.securitytracker.com/id?1021422 firefox-feedpreview-code-execution(47410) https://exchange.xforce.ibmcloud.com/vulnerabilities/47410 http://www.mozilla.org/security/announce/2008/mfsa2008-62.html https://bugzilla.mozilla.org/show_bug.cgi?id=453526 oval:org.mitre.oval:def:10781 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10781 Common Vulnerability Exposure (CVE) ID: CVE-2008-5506 1021427 http://www.securitytracker.com/id?1021427 http://www.mozilla.org/security/announce/2008/mfsa2008-64.html https://bugzilla.mozilla.org/show_bug.cgi?id=458248 mozilla-xmlhttprequest-302-info-disclosure(47412) https://exchange.xforce.ibmcloud.com/vulnerabilities/47412 oval:org.mitre.oval:def:10512 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10512 Common Vulnerability Exposure (CVE) ID: CVE-2008-5507 1021423 http://www.securitytracker.com/id?1021423 20081218 Firefox cross-domain text theft (CESA-2008-011) http://www.securityfocus.com/archive/1/499353/100/0/threaded http://scary.beasts.org/security/CESA-2008-011.html http://www.mozilla.org/security/announce/2008/mfsa2008-65.html https://bugzilla.mozilla.org/show_bug.cgi?id=461735 mozilla-javascripturl-infor-disclosure(47413) https://exchange.xforce.ibmcloud.com/vulnerabilities/47413 oval:org.mitre.oval:def:9376 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9376 Common Vulnerability Exposure (CVE) ID: CVE-2008-5508 1021426 http://www.securitytracker.com/id?1021426 http://www.mozilla.org/security/announce/2008/mfsa2008-66.html https://bugzilla.mozilla.org/show_bug.cgi?id=425046 mozilla-urlparsing-weak-security(47414) https://exchange.xforce.ibmcloud.com/vulnerabilities/47414 oval:org.mitre.oval:def:11040 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11040 Common Vulnerability Exposure (CVE) ID: CVE-2008-5510 1021425 http://www.securitytracker.com/id?1021425 http://www.mozilla.org/security/announce/2008/mfsa2008-67.html https://bugzilla.mozilla.org/show_bug.cgi?id=228856 mozilla-cssparser-security-bypass(47415) https://exchange.xforce.ibmcloud.com/vulnerabilities/47415 oval:org.mitre.oval:def:9662 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9662 Common Vulnerability Exposure (CVE) ID: CVE-2008-5511 1021418 http://www.securitytracker.com/id?1021418 http://www.mozilla.org/security/announce/2008/mfsa2008-68.html https://bugzilla.mozilla.org/show_bug.cgi?id=451680 https://bugzilla.mozilla.org/show_bug.cgi?id=464174 mozilla-xbl-security-bypass(47417) https://exchange.xforce.ibmcloud.com/vulnerabilities/47417 oval:org.mitre.oval:def:11881 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11881 Common Vulnerability Exposure (CVE) ID: CVE-2008-5512 mozilla-xpcnativewrappers-code-execution(47416) https://exchange.xforce.ibmcloud.com/vulnerabilities/47416 oval:org.mitre.oval:def:9814 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9814 Common Vulnerability Exposure (CVE) ID: CVE-2008-5513 1021421 http://www.securitytracker.com/id?1021421 firefox-sessionrestore-security-bypass(47418) https://exchange.xforce.ibmcloud.com/vulnerabilities/47418 http://www.mozilla.org/security/announce/2008/mfsa2008-69.html oval:org.mitre.oval:def:10389 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10389 Common Vulnerability Exposure (CVE) ID: CVE-2008-5501 https://bugzilla.mozilla.org/show_bug.cgi?id=395623 mozilla-layout-code-execution-var4(47407) https://exchange.xforce.ibmcloud.com/vulnerabilities/47407 oval:org.mitre.oval:def:10257 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10257 Common Vulnerability Exposure (CVE) ID: CVE-2008-5502 firefox-js-deflatestring-code-execution(47408) https://exchange.xforce.ibmcloud.com/vulnerabilities/47408 https://bugzilla.mozilla.org/show_bug.cgi?id=458679 oval:org.mitre.oval:def:10001 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10001 Common Vulnerability Exposure (CVE) ID: CVE-2008-5505 1021428 http://www.securitytracker.com/id?1021428 firefox-xul-weak-security(47411) https://exchange.xforce.ibmcloud.com/vulnerabilities/47411 http://www.mozilla.org/security/announce/2008/mfsa2008-63.html https://bugzilla.mozilla.org/show_bug.cgi?id=295994 oval:org.mitre.oval:def:10443 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10443
Copyright	Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.