A patch is applied to this rpm for XSS security vulnerability found in WEBrick module which is now tagged as CVE-2010-0541.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Drew Yao discovered that the WEBrick HTTP server was vulnerable to cross-site scripting attacks when displaying error pages. A remote attacker could use this flaw to run arbitrary web script.
(CVE-2010-0541)

Drew Yao discovered that Ruby's BigDecimal module did not properly allocate memory on 64-bit platforms. An attacker could use this flaw to cause a denial of service or possibly execute arbitrary code with user privileges. (CVE-2011-0188)

Nicholas Jefferson discovered that the FileUtils.remove_entry_secure method in Ruby did not properly remove non-empty directories. An attacker could use this flaw to possibly delete arbitrary files.
(CVE-2011-1004)

It was discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. An attacker could use this flaw to bypass intended access restrictions. (CVE-2011-1005)

Eric Wong discovered that Ruby does not properly reseed its pseudorandom number generator when creating child processes. An attacker could use this flaw to gain knowledge of the random numbers used in other Ruby child processes. (CVE-2011-2686)

Eric Wong discovered that the SecureRandom module in Ruby did not properly seed its pseudorandom number generator. An attacker could use this flaw to gain knowledge of the random numbers used by another Ruby process with the same process ID number. (CVE-2011-2705)

Alexander Klink and Julian Walde discovered that Ruby computed hash values without restricting the ability to trigger hash collisions predictably. A remote attacker could cause a denial of service by crafting values used in hash tables. (CVE-2011-4815).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A patch is applied to this rpm for XSS security vulnerability found in WEBrick module which is now tagged as CVE-2010-0541. A bug was reported that ruby crashes when executing a script which uses some unqualified constant. Also it seems that Ruby/Tk in current rpm in Fedora causes crash even in some easy case. This new rpm will fix these issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The following several security issues of ruby have been fixed :

  - A race condition allowing local users to delete     arbitrary files. (CVE-2011-1004)

  - Exception methods could bypass safe mode.
    (CVE-2011-1005)

  - webrick does not sanitize non-printable characters in     log. (CVE-2009-4492)

  - A webrick cross-site scripting issue. (CVE-2010-0541)

  - A memory corruption in the BigDecimal class     (CVE-2011-0188)

Updated ruby packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to do system management tasks.

A flaw was found in the way large amounts of memory were allocated on 64-bit systems when using the BigDecimal class. A context-dependent attacker could use this flaw to cause memory corruption, causing a Ruby application that uses the BigDecimal class to crash or, possibly, execute arbitrary code. This issue did not affect 32-bit systems.
(CVE-2011-0188)

It was found that WEBrick (the Ruby HTTP server toolkit) did not filter terminal escape sequences from its log files. A remote attacker could use specially crafted HTTP requests to inject terminal escape sequences into the WEBrick log files. If a victim viewed the log files with a terminal emulator, it could result in control characters being executed with the privileges of that user. (CVE-2009-4492)

A cross-site scripting (XSS) flaw was found in the way WEBrick displayed error pages. A remote attacker could use this flaw to perform a cross-site scripting attack against victims by tricking them into visiting a specially crafted URL. (CVE-2010-0541)

A flaw was found in the method for translating an exception message into a string in the Exception class. A remote attacker could use this flaw to bypass safe level 4 restrictions, allowing untrusted (tainted) code to modify arbitrary, trusted (untainted) strings, which safe level 4 restrictions would otherwise prevent. (CVE-2011-1005)

Red Hat would like to thank Drew Yao of Apple Product Security for reporting the CVE-2011-0188 and CVE-2010-0541 issues.

All Ruby users should upgrade to these updated packages, which contain backported patches to resolve these issues.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0909 advisory.

    - Address CVE-2011-1004 'Symlink race condition by removing directory trees in       fileutils module'
      * ruby-1.8.7-CVE-2011-1004.patch
    - Address CVE-2011-1005 'Untrusted codes able to modify arbitrary strings'
      * ruby-1.8.7-CVE-2011-1005.patch
    - Address CVE-2011-0188 'memory corruption in BigDecimal on 64bit platforms'
      * ruby-1.8.7-CVE-2011-0188.patch
    - Address CVE-CVE-2010-0541 'Ruby WEBrick javascript injection flaw'
      * ruby-1.8.7-CVE-2010-0541.patch
    - Address CVE-CVE-2009-4492 'ruby WEBrick log escape sequence'
      * ruby-1.8.6-CVE-2009-4492.patch

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Ruby was prone to several security issues :

  - a race condition allowed local users to delete arbitrary     files (CVE-2011-1004)

  - exception methods could bypass safe mode (CVE-2011-1005)

  - webrick cross site scripting issue (CVE-2010-0541)

  - memory corruption in the BigDecimal class     (CVE-2011-0188)

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.4.

Mac OS X 10.6.4 contains security fixes for the following components :

  - CUPS
  - DesktopServices
  - Flash Player plug-in
  - Folder Manager
  - Help Viewer
  - iChat
  - ImageIO
  - Kerberos
  - Kernel
  - libcurl
  - Network Authorization
  - Open Directory
  - Printer Setup
  - Printing
  - Ruby
  - SMB File Server
  - SquirrelMail
  - Wiki Server

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0908 advisory.

  - ruby WEBrick log escape sequence (CVE-2009-4492)

  - Ruby WEBrick javascript injection flaw (CVE-2010-0541)

  - ruby: memory corruption in BigDecimal on 64bit platforms (CVE-2011-0188)

  - Ruby: Untrusted codes able to modify arbitrary strings (CVE-2011-1005)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0909 advisory.

  - ruby WEBrick log escape sequence (CVE-2009-4492)

  - Ruby WEBrick javascript injection flaw (CVE-2010-0541)

  - ruby: memory corruption in BigDecimal on 64bit platforms (CVE-2011-0188)

  - Ruby: Symlink race condition by removing directory trees in fileutils module (CVE-2011-1004)

  - Ruby: Untrusted codes able to modify arbitrary strings (CVE-2011-1005)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to do system management tasks.

A flaw was found in the way large amounts of memory were allocated on 64-bit systems when using the BigDecimal class. A context-dependent attacker could use this flaw to cause memory corruption, causing a Ruby application that uses the BigDecimal class to crash or, possibly, execute arbitrary code. This issue did not affect 32-bit systems.
(CVE-2011-0188)

A race condition flaw was found in the remove system entries method in the FileUtils module. If a local user ran a Ruby script that uses this method, a local attacker could use this flaw to delete arbitrary files and directories accessible to that user via a symbolic link attack.
(CVE-2011-1004)

It was found that WEBrick (the Ruby HTTP server toolkit) did not filter terminal escape sequences from its log files. A remote attacker could use specially crafted HTTP requests to inject terminal escape sequences into the WEBrick log files. If a victim viewed the log files with a terminal emulator, it could result in control characters being executed with the privileges of that user. (CVE-2009-4492)

A cross-site scripting (XSS) flaw was found in the way WEBrick displayed error pages. A remote attacker could use this flaw to perform a cross-site scripting attack against victims by tricking them into visiting a specially crafted URL. (CVE-2010-0541)

A flaw was found in the method for translating an exception message into a string in the Exception class. A remote attacker could use this flaw to bypass safe level 4 restrictions, allowing untrusted (tainted) code to modify arbitrary, trusted (untainted) strings, which safe level 4 restrictions would otherwise prevent. (CVE-2011-1005)

All Ruby users should upgrade to these updated packages, which contain backported patches to resolve these issues.

Updated ruby packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to do system management tasks.

A flaw was found in the way large amounts of memory were allocated on 64-bit systems when using the BigDecimal class. A context-dependent attacker could use this flaw to cause memory corruption, causing a Ruby application that uses the BigDecimal class to crash or, possibly, execute arbitrary code. This issue did not affect 32-bit systems.
(CVE-2011-0188)

A race condition flaw was found in the remove system entries method in the FileUtils module. If a local user ran a Ruby script that uses this method, a local attacker could use this flaw to delete arbitrary files and directories accessible to that user via a symbolic link attack.
(CVE-2011-1004)

It was found that WEBrick (the Ruby HTTP server toolkit) did not filter terminal escape sequences from its log files. A remote attacker could use specially crafted HTTP requests to inject terminal escape sequences into the WEBrick log files. If a victim viewed the log files with a terminal emulator, it could result in control characters being executed with the privileges of that user. (CVE-2009-4492)

A cross-site scripting (XSS) flaw was found in the way WEBrick displayed error pages. A remote attacker could use this flaw to perform a cross-site scripting attack against victims by tricking them into visiting a specially crafted URL. (CVE-2010-0541)

A flaw was found in the method for translating an exception message into a string in the Exception class. A remote attacker could use this flaw to bypass safe level 4 restrictions, allowing untrusted (tainted) code to modify arbitrary, trusted (untainted) strings, which safe level 4 restrictions would otherwise prevent. (CVE-2011-1005)

Red Hat would like to thank Drew Yao of Apple Product Security for reporting the CVE-2011-0188 and CVE-2010-0541 issues.

All Ruby users should upgrade to these updated packages, which contain backported patches to resolve these issues.

The official ruby site reports :

WEBrick have had a cross-site scripting vulnerability that allows an attacker to inject arbitrary script or HTML via a crafted URI. This does not affect user agents that strictly implement HTTP/1.1, however, some user agents do not.

New version 1.8.7p302 is released. This version is for XSS security vulnerability found in WEBrick module which is now tagged as CVE-2010-0541.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-226:01 advisory.

    Ruby is the interpreted scripting language for quick and easy object-oriented programming.  It has many     features to process text files and to do system management tasks (as in Perl).  It is simple, straight-     forward, and extensible.
    Security issues fixed with this release:
    CVE-2009-4492     WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through     patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which     might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or     overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
    CVE-2010-0541     Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and     10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that     triggers a UTF-7 error page.
    CVE-2011-0188     The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on     Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-     dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors     involving creation of a large BigDecimal value within a 64-bit process, related to an integer truncation     issue.
    CVE-2011-1004     The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330,     1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete     arbitrary files via a symlink attack.4     CVE-2011-1005     The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows     context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing     an intended pathname.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

From Red Hat Security Advisory 2011:0908 :

Updated ruby packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4.

The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to do system management tasks.

A flaw was found in the way large amounts of memory were allocated on 64-bit systems when using the BigDecimal class. A context-dependent attacker could use this flaw to cause memory corruption, causing a Ruby application that uses the BigDecimal class to crash or, possibly, execute arbitrary code. This issue did not affect 32-bit systems.
(CVE-2011-0188)

It was found that WEBrick (the Ruby HTTP server toolkit) did not filter terminal escape sequences from its log files. A remote attacker could use specially crafted HTTP requests to inject terminal escape sequences into the WEBrick log files. If a victim viewed the log files with a terminal emulator, it could result in control characters being executed with the privileges of that user. (CVE-2009-4492)

A cross-site scripting (XSS) flaw was found in the way WEBrick displayed error pages. A remote attacker could use this flaw to perform a cross-site scripting attack against victims by tricking them into visiting a specially crafted URL. (CVE-2010-0541)

A flaw was found in the method for translating an exception message into a string in the Exception class. A remote attacker could use this flaw to bypass safe level 4 restrictions, allowing untrusted (tainted) code to modify arbitrary, trusted (untainted) strings, which safe level 4 restrictions would otherwise prevent. (CVE-2011-1005)

Red Hat would like to thank Drew Yao of Apple Product Security for reporting the CVE-2011-0188 and CVE-2010-0541 issues.

All Ruby users should upgrade to these updated packages, which contain backported patches to resolve these issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
48417	Fedora 13 : ruby-1.8.6.399-6.fc13 (2010-13387)	Nessus	Fedora Local Security Checks	2010/8/24	2021/1/11	medium
58146	Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : ruby1.8 vulnerabilities (USN-1377-1)	Nessus	Ubuntu Local Security Checks	2012/2/28	2019/9/19	high
48416	Fedora 12 : ruby-1.8.6.399-6.fc12 (2010-13341)	Nessus	Fedora Local Security Checks	2010/8/24	2021/1/11	medium
54921	SuSE 11.1 Security Update : ruby (SAT Patch Number 4585)	Nessus	SuSE Local Security Checks	2011/5/31	2021/1/19	medium
55837	CentOS 4 : ruby (CESA-2011:0908)	Nessus	CentOS Local Security Checks	2011/8/15	2021/1/4	medium
68298	Oracle Linux 5 : ruby (ELSA-2011-0909)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2025/4/29	critical
75729	openSUSE Security Update : ruby (openSUSE-SU-2011:0561-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	medium
47023	Mac OS X 10.6.x < 10.6.4 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2010/6/15	2024/5/28	high
55450	RHEL 4 : ruby (RHSA-2011:0908)	Nessus	Red Hat Local Security Checks	2011/6/29	2024/4/21	critical
55451	RHEL 5 : ruby (RHSA-2011:0909)	Nessus	Red Hat Local Security Checks	2011/6/29	2024/4/27	critical
61076	Scientific Linux Security Update : ruby on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	medium
67085	CentOS 5 : ruby (CESA-2011:0909)	Nessus	CentOS Local Security Checks	2013/6/29	2021/1/4	medium
48370	FreeBSD : ruby -- UTF-7 encoding XSS vulnerability in WEBrick (34e0316a-aa91-11df-8c2e-001517289bf8)	Nessus	FreeBSD Local Security Checks	2010/8/19	2021/1/6	medium
48419	Fedora 14 : ruby-1.8.7.302-1.fc14 (2010-13401)	Nessus	Fedora Local Security Checks	2010/8/24	2021/1/11	medium
283937	MiracleLinux 3 : ruby-1.8.5-19.1.0.1.AXS3 (AXSA:2011-226:01)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	critical
68297	Oracle Linux 4 : ruby (ELSA-2011-0908)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium

检测

插件搜索

medium

high

medium

medium

medium

critical

medium

high

critical

critical

medium

medium

medium

medium

critical

medium