Test ID:	1.3.6.1.4.1.25623.1.0.841196
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-1614-1)
Summary:	The remote host is missing an update for the 'ruby1.9.1' package(s) announced via the USN-1614-1 advisory.
Description:	Summary: The remote host is missing an update for the 'ruby1.9.1' package(s) announced via the USN-1614-1 advisory. Vulnerability Insight: Tyler Hicks and Shugo Maeda discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. An attacker could use this flaw to bypass intended access restrictions. USN-1602-1 fixed these vulnerabilities in other Ubuntu releases. This update provides the corresponding updates for Ubuntu 12.10. (CVE-2012-4464, CVE-2012-4466) Peter Bex discovered that Ruby incorrectly handled file path strings when opening files. An attacker could use this flaw to open or create unexpected files. (CVE-2012-4522) Affected Software/OS: 'ruby1.9.1' package(s) on Ubuntu 12.04, Ubuntu 12.10. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-4464 http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089554.html http://lists.fedoraproject.org/pipermail/package-announce/2012-October/089887.html http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=37068 http://www.openwall.com/lists/oss-security/2012/10/02/4 http://www.openwall.com/lists/oss-security/2012/10/03/9 Common Vulnerability Exposure (CVE) ID: CVE-2012-4466 http://www.mandriva.com/security/advisories?name=MDVSA-2013:124 Common Vulnerability Exposure (CVE) ID: CVE-2012-4522 http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090235.html http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090515.html http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=37163 http://www.openwall.com/lists/oss-security/2012/10/12/6 http://www.openwall.com/lists/oss-security/2012/10/13/1 http://www.openwall.com/lists/oss-security/2012/10/16/1 RedHat Security Advisories: RHSA-2013:0129 http://rhn.redhat.com/errata/RHSA-2013-0129.html
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.