Test ID:	1.3.6.1.4.1.25623.1.0.703509
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-3509-1)
Summary:	The remote host is missing an update for the Debian 'rails' package(s) announced via the DSA-3509-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'rails' package(s) announced via the DSA-3509-1 advisory. Vulnerability Insight: Two vulnerabilities have been discovered in Rails, a web application framework written in Ruby. Both vulnerabilities affect Action Pack, which handles the web requests for Rails. CVE-2016-2097 Crafted requests to Action View, one of the components of Action Pack, might result in rendering files from arbitrary locations, including files beyond the application's view directory. This vulnerability is the result of an incomplete fix of CVE-2016-0752. This bug was found by Jyoti Singh and Tobias Kraze from Makandra. CVE-2016-2098 If a web applications does not properly sanitize user inputs, an attacker might control the arguments of the render method in a controller or a view, resulting in the possibility of executing arbitrary ruby code. This bug was found by Tobias Kraze from Makandra and joernchen of Phenoelit. For the stable distribution (jessie), these problems have been fixed in version 2:4.1.8-1+deb8u2. For the testing distribution (stretch), these problems have been fixed in version 2:4.2.5.2-1. For the unstable distribution (sid), these problems have been fixed in version 2:4.2.5.2-1. We recommend that you upgrade your rails packages. Affected Software/OS: 'rails' package(s) on Debian 8. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2097 BugTraq ID: 83726 http://www.securityfocus.com/bid/83726 Debian Security Information: DSA-3509 (Google Search) http://www.debian.org/security/2016/dsa-3509 https://groups.google.com/forum/message/raw?msg=rubyonrails-security/ddY6HgqB2z4/we0RasMZIAAJ http://www.securitytracker.com/id/1035122 SuSE Security Announcement: SUSE-SU-2016:0854 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00083.html SuSE Security Announcement: SUSE-SU-2016:0967 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00006.html SuSE Security Announcement: openSUSE-SU-2016:0835 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00080.html Common Vulnerability Exposure (CVE) ID: CVE-2016-2098 BugTraq ID: 83725 http://www.securityfocus.com/bid/83725 https://www.exploit-db.com/exploits/40086/ https://groups.google.com/forum/message/raw?msg=rubyonrails-security/ly-IH-fxr_Q/WLoOhcMZIAAJ SuSE Security Announcement: SUSE-SU-2016:0867 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00086.html SuSE Security Announcement: SUSE-SU-2016:1146 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html SuSE Security Announcement: openSUSE-SU-2016:0790 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00057.html
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.