Test ID:	1.3.6.1.4.1.25623.1.0.841184
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-1603-1)
Summary:	The remote host is missing an update for the 'ruby1.8' package(s) announced via the USN-1603-1 advisory.
Description:	Summary: The remote host is missing an update for the 'ruby1.8' package(s) announced via the USN-1603-1 advisory. Vulnerability Insight: Shugo Maedo and Vit Ondruch discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. An attacker could use this flaw to bypass intended access restrictions. (CVE-2012-4466, CVE-2012-4481) Affected Software/OS: 'ruby1.8' package(s) on Ubuntu 10.04, Ubuntu 11.04, Ubuntu 11.10, Ubuntu 12.04. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4466 http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089554.html http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089887.html http://www.mandriva.com/security/advisories?name=MDVSA-2013:124 http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=37068 http://www.openwall.com/lists/oss-security/2012/10/02/4 http://www.openwall.com/lists/oss-security/2012/10/03/9 Common Vulnerability Exposure (CVE) ID: CVE-2012-4481 MDVSA-2013:124 RHSA-2013:0129 http://rhn.redhat.com/errata/RHSA-2013-0129.html RHSA-2013:0612 http://rhn.redhat.com/errata/RHSA-2013-0612.html [oss-security] 20121005 Re: CVE Request -- ruby (1.8.x with patched CVE-2011-1005): Incomplete fix for CVE-2011-1005 for NameError#to_s method when used on objects http://www.openwall.com/lists/oss-security/2012/10/05/4 https://bugzilla.redhat.com/show_bug.cgi?id=863484 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0294
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.