The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:0672 advisory.

    * rubygem-rdoc: Command injection vulnerability in RDoc (CVE-2021-31799)

    * ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host (CVE-2021-31810)

    * ruby: StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute     arbitrary code via | and tags in a filename. (CVE-2021-31799)

  - An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does     not raise an exception when StartTLS fails with an an unknown response, which might allow man-in-the-     middle attackers to bypass the TLS protections by leveraging a network position between the client and the     registry to block the StartTLS command, aka a 'StartTLS stripping attack.' (CVE-2021-32066)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2780 advisory.

    Multiple vulnerabilites in ruby2.3, interpreter of object-oriented scripting language Ruby, were     discovered. CVE-2021-31799 In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 2.3.3,     it is possible to execute arbitrary code via | and tags in a filename. CVE-2021-31810 An issue was     discovered in Ruby through 2.3.3. A malicious FTP server can use the PASV response to trick Net::FTP into     connecting back to a given IP address and port. This potentially makes curl extract information about     services that are otherwise private and not disclosed (e.g., the attacker can conduct port scans and     service banner extractions). CVE-2021-32066 An issue was discovered in Ruby through 2.3.3. Net::IMAP does     not raise an exception when StartTLS fails with an an unknown response, which might allow man-in-the-     middle attackers to bypass the TLS protections by leveraging a network position between the client and the     registry to block the StartTLS command, aka a StartTLS stripping attack. For Debian 9 stretch, these     problems have been fixed in version 2.3.3-1+deb9u10. We recommend that you upgrade your ruby2.3 packages.
    For the detailed security status of ruby2.3 please refer to its security tracker page at:
    https://security-tracker.debian.org/tracker/ruby2.3 Further information about Debian LTS security     advisories, how to apply these updates to your system and frequently asked questions can be found at:
    https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3982 advisory.

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text     files and to perform system management tasks.

    The following packages have been upgraded to a later upstream version: rh-ruby30-ruby (3.0.2).

    Security Fix(es):

    * rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source     (CVE-2020-36327)

    * rubygem-rdoc: Command injection vulnerability in RDoc (CVE-2021-31799)

    * ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host (CVE-2021-31810)

    * ruby: StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute     arbitrary code via | and tags in a filename. (CVE-2021-31799)

  - An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP     server can use the PASV response to trick Net::FTP into connecting back to a given IP address and port.
    This potentially makes curl extract information about services that are otherwise private and not     disclosed (e.g., the attacker can conduct port scans and service banner extractions). (CVE-2021-31810)

  - An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. Net::IMAP does     not raise an exception when StartTLS fails with an an unknown response, which might allow man-in-the-     middle attackers to bypass the TLS protections by leveraging a network position between the client and the     registry to block the StartTLS command, aka a 'StartTLS stripping attack.' (CVE-2021-32066)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Ruby news :

This release includes security fixes. Please check the topics below for details.

CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP

CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP

CVE-2021-31799: A command injection vulnerability in RDoc

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2423:02 advisory.

    * rubygem-bundler: Dependencies of gems with explicit source may be installed from a different source     (CVE-2020-36327)
      * rubygem-rdoc: Command injection vulnerability in RDoc (CVE-2021-31799)
      * ruby: FTP PASV command response can cause Net::FTP to connect to arbitrary host (CVE-2021-31810)
      * ruby: StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
158823	AlmaLinux 8 : ruby:2.5 (ALSA-2022:0672)	Nessus	Alma Linux Local Security Checks	3/11/2022	1/13/2025	high
153649	EulerOS 2.0 SP8 : ruby (EulerOS-SA-2021-2486)	Nessus	Huawei Local Security Checks	9/24/2021	11/29/2023	high
154114	Debian DLA-2780-1 : ruby2.3 - LTS security update	Nessus	Debian Local Security Checks	10/13/2021	1/24/2025	high
154437	RHEL 7 : rh-ruby30-ruby (RHSA-2021:3982)	Nessus	Red Hat Local Security Checks	10/27/2021	11/7/2024	high
155246	EulerOS 2.0 SP9 : ruby (EulerOS-SA-2021-2696)	Nessus	Huawei Local Security Checks	11/11/2021	11/24/2023	high
155275	EulerOS 2.0 SP5 : ruby (EulerOS-SA-2021-2673)	Nessus	Huawei Local Security Checks	11/11/2021	11/24/2023	high
151778	FreeBSD : Ruby -- multiple vulnerabilities (7ed5779c-e4c7-11eb-91d7-08002728f74c)	Nessus	FreeBSD Local Security Checks	7/16/2021	12/7/2023	high
294598	MiracleLinux 7 : rh-ruby27-ruby-2.7.4-130.el7 (AXSA:2021-2423:02)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high