Test Kennung:	1.3.6.1.4.1.25623.1.0.122635
Kategorie:	Oracle Linux Local Security Checks
Titel:	Oracle: Security Advisory (ELSA-2007-0965)
Zusammenfassung:	The remote host is missing an update for the 'ruby' package(s) announced via the ELSA-2007-0965 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'ruby' package(s) announced via the ELSA-2007-0965 advisory. Vulnerability Insight: [1.8.5-5.el5_1.1] - security fix for CVE-2007-5162 and CVE-2007-5770 - ruby-1.8.5-CVE-2007-5162.patch: fix issues that is insufficient verification of SSL certificate. (#320331) - Fix the multilib regression issue. [1.8.5-5] - security fix release. - ruby-1.8.5-cgi-CVE-2006-6303.patch: fix a infinite loop with certain HTTP request. (#218290) -------------- next part -------------- An HTML attachment was scrubbed... URL: [link moved to references] Affected Software/OS: 'ruby' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5162 BugTraq ID: 25847 http://www.securityfocus.com/bid/25847 Bugtraq: 20070927 Ruby Net::HTTPS library does not validate server certificate CN (Google Search) http://www.securityfocus.com/archive/1/480987/100/0/threaded Bugtraq: 20071112 FLEA-2007-0068-1 ruby (Google Search) http://www.securityfocus.com/archive/1/483577/100/0/threaded Debian Security Information: DSA-1410 (Google Search) http://www.debian.org/security/2007/dsa-1410 Debian Security Information: DSA-1411 (Google Search) http://www.debian.org/security/2007/dsa-1411 Debian Security Information: DSA-1412 (Google Search) http://www.debian.org/security/2007/dsa-1412 https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00097.html https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00391.html https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00087.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:029 http://www.isecpartners.com/advisories/2007-006-rubyssl.txt https://bugzilla.redhat.com/show_bug.cgi?id=313791 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10738 http://www.redhat.com/support/errata/RHSA-2007-0961.html http://www.redhat.com/support/errata/RHSA-2007-0965.html http://secunia.com/advisories/26985 http://secunia.com/advisories/27044 http://secunia.com/advisories/27432 http://secunia.com/advisories/27576 http://secunia.com/advisories/27673 http://secunia.com/advisories/27756 http://secunia.com/advisories/27764 http://secunia.com/advisories/27769 http://secunia.com/advisories/27818 http://secunia.com/advisories/28645 http://secunia.com/advisories/29556 http://securityreason.com/securityalert/3180 SuSE Security Announcement: SUSE-SR:2007:024 (Google Search) http://www.novell.com/linux/security/advisories/2007_24_sr.html http://www.ubuntu.com/usn/usn-596-1 http://www.vupen.com/english/advisories/2007/3340 XForce ISS Database: ruby-nethttps-mitm(36861) https://exchange.xforce.ibmcloud.com/vulnerabilities/36861 Common Vulnerability Exposure (CVE) ID: CVE-2007-5770 1018938 http://www.securitytracker.com/id?1018938 26421 http://www.securityfocus.com/bid/26421 26985 27576 27673 27756 27764 27769 27818 28136 http://secunia.com/advisories/28136 28645 29556 ADV-2007-4238 http://www.vupen.com/english/advisories/2007/4238 APPLE-SA-2007-12-17 http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html DSA-1410 DSA-1411 DSA-1412 MDVSA-2008:029 RHSA-2007:0961 RHSA-2007:0965 SUSE-SR:2007:024 TA07-352A http://www.us-cert.gov/cas/techalerts/TA07-352A.html USN-596-1 http://docs.info.apple.com/article.html?artnum=307179 http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=13656 https://bugzilla.redhat.com/show_bug.cgi?id=362081 oval:org.mitre.oval:def:11025 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11025
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.