SuSE 11.1 Security Update : ruby (SAT Patch Number 4585)
medium Nessus Plugin ID 54921
Language:
Synopsis
The remote SuSE 11 host is missing one or more security updates.Description
The following several security issues of ruby have been fixed :- A race condition allowing local users to delete arbitrary files. (CVE-2011-1004)
- Exception methods could bypass safe mode.
(CVE-2011-1005)
- webrick does not sanitize non-printable characters in log. (CVE-2009-4492)
- A webrick cross-site scripting issue. (CVE-2010-0541)
- A memory corruption in the BigDecimal class (CVE-2011-0188)
Solution
Apply SAT patch number 4585.See Also
https://bugzilla.novell.com/show_bug.cgi?id=554178
https://bugzilla.novell.com/show_bug.cgi?id=570616
https://bugzilla.novell.com/show_bug.cgi?id=600752
https://bugzilla.novell.com/show_bug.cgi?id=673740
https://bugzilla.novell.com/show_bug.cgi?id=673750
https://bugzilla.novell.com/show_bug.cgi?id=682287
http://support.novell.com/security/cve/CVE-2009-4492.html
http://support.novell.com/security/cve/CVE-2010-0541.html
http://support.novell.com/security/cve/CVE-2011-0188.html
Plugin Details
Severity: Medium
ID: 54921
File Name: suse_11_ruby-110517.nasl
Version: 1.7
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 5/31/2011
Updated: 1/19/2021
Supported Sensors: Nessus Agent
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:novell:suse_linux:11:ruby, p-cpe:/a:novell:suse_linux:11:ruby-doc-html, p-cpe:/a:novell:suse_linux:11:ruby-tk, cpe:/o:novell:suse_linux:11
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Patch Publication Date: 5/17/2011
Reference Information
CVE: CVE-2009-4492, CVE-2010-0541, CVE-2011-0188, CVE-2011-1004, CVE-2011-1005
CWE: 20