Test ID:	1.3.6.1.4.1.25623.1.0.841179
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-1602-1)
Summary:	The remote host is missing an update for the 'ruby1.9.1' package(s) announced via the USN-1602-1 advisory.
Description:	Summary: The remote host is missing an update for the 'ruby1.9.1' package(s) announced via the USN-1602-1 advisory. Vulnerability Insight: Tyler Hicks and Shugo Maeda discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. An attacker could use this flaw to bypass intended access restrictions. (CVE-2012-4464, CVE-2012-4466) Affected Software/OS: 'ruby1.9.1' package(s) on Ubuntu 12.04. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4464 http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089554.html http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089887.html http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=37068 http://www.openwall.com/lists/oss-security/2012/10/02/4 http://www.openwall.com/lists/oss-security/2012/10/03/9 Common Vulnerability Exposure (CVE) ID: CVE-2012-4466 http://www.mandriva.com/security/advisories?name=MDVSA-2013:124
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.