Mandrake Linux Security Advisory : ruby (MDKSA-2004:128)
Medium Nessus Plugin ID 15650
SynopsisThe remote Mandrake Linux host is missing one or more security updates.
DescriptionAndres Salomon noticed a problem with the CGI session management in Ruby. The CGI:Session's FileStore implementations store session information in an insecure manner by just creating files and ignoring permission issues (CVE-2004-0755).
The ruby developers have corrected a problem in the ruby CGI module that can be triggered remotely and cause an inifinite loop on the server (CVE-2004-0983).
The updated packages are patched to prevent these problems.
SolutionUpdate the affected packages.