var-201103-0287
Vulnerability from variot
The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving creation of a large BigDecimal value within a 64-bit process, related to an "integer truncation issue.". Apple Mac OS X is a dedicated operating system developed by Apple for Mac computers.
The safe-level feature in Ruby allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname (CVE-2011-1005). (CVE-2011-0188).
Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/product_info.php?cPath=149&products_id=490
The updated packages have been patched to correct this issue. The verification of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
iD8DBQFN2jqhmqjQ0CJFipgRAlnKAKDcf6I3beHFSSrX86ob/PzT+NwtxgCeNgsq uMw3t7u8fkmaD51bIO3CaIw= =yXr+ -----END PGP SIGNATURE-----
Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/ . (CVE-2011-1004)
It was found that WEBrick (the Ruby HTTP server toolkit) did not filter terminal escape sequences from its log files. A remote attacker could use specially-crafted HTTP requests to inject terminal escape sequences into the WEBrick log files. If a victim viewed the log files with a terminal emulator, it could result in control characters being executed with the privileges of that user. (CVE-2009-4492)
A cross-site scripting (XSS) flaw was found in the way WEBrick displayed error pages. A remote attacker could use this flaw to perform a cross-site scripting attack against victims by tricking them into visiting a specially-crafted URL. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201412-27
http://security.gentoo.org/
Severity: Normal Title: Ruby: Denial of Service Date: December 13, 2014 Bugs: #355439, #369141, #396301, #437366, #442580, #458776, #492282, #527084, #529216 ID: 201412-27
Synopsis
Multiple vulnerabilities have been found in Ruby, allowing context-dependent attackers to cause a Denial of Service condition.
Affected packages
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 dev-lang/ruby < 2.0.0_p598 *>= 1.9.3_p551 >= 2.0.0_p598
Description
Multiple vulnerabilities have been discovered in Ruby. Please review the CVE identifiers referenced below for details.
Workaround
There is no known workaround at this time.
Resolution
All Ruby 1.9 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/ruby-1.9.3_p551"
All Ruby 2.0 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/ruby-2.0.0_p598"
References
[ 1 ] CVE-2011-0188 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0188 [ 2 ] CVE-2011-1004 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1004 [ 3 ] CVE-2011-1005 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1005 [ 4 ] CVE-2011-4815 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-4815 [ 5 ] CVE-2012-4481 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4481 [ 6 ] CVE-2012-5371 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5371 [ 7 ] CVE-2013-0269 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0269 [ 8 ] CVE-2013-1821 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1821 [ 9 ] CVE-2013-4164 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4164 [ 10 ] CVE-2014-8080 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-8080 [ 11 ] CVE-2014-8090 http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-8090
Availability
This GLSA and any updates to it are available for viewing at the Gentoo Security Website:
http://security.gentoo.org/glsa/glsa-201412-27.xml
Concerns?
Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to security@gentoo.org or alternatively, you may file a bug at https://bugs.gentoo.org.
License
Copyright 2014 Gentoo Foundation, Inc; referenced text belongs to its owner(s).
The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license.
http://creativecommons.org/licenses/by-sa/2.5 . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
===================================================================== Red Hat Security Advisory
Synopsis: Moderate: ruby security update Advisory ID: RHSA-2011:0910-01 Product: Red Hat Enterprise Linux Advisory URL: https://rhn.redhat.com/errata/RHSA-2011-0910.html Issue date: 2011-06-28 CVE Names: CVE-2011-0188 CVE-2011-1004 CVE-2011-1005 =====================================================================
- Summary:
Updated ruby packages that fix three security issues are now available for Red Hat Enterprise Linux 6. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
- Relevant releases/architectures:
Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64
- Description:
Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to do system management tasks.
A flaw was found in the way large amounts of memory were allocated on 64-bit systems when using the BigDecimal class. This issue did not affect 32-bit systems. (CVE-2011-0188)
A race condition flaw was found in the remove system entries method in the FileUtils module. If a local user ran a Ruby script that uses this method, a local attacker could use this flaw to delete arbitrary files and directories accessible to that user via a symbolic link attack. (CVE-2011-1004)
A flaw was found in the method for translating an exception message into a string in the Exception class. A remote attacker could use this flaw to bypass safe level 4 restrictions, allowing untrusted (tainted) code to modify arbitrary, trusted (untainted) strings, which safe level 4 restrictions would otherwise prevent. (CVE-2011-1005)
Red Hat would like to thank Drew Yao of Apple Product Security for reporting the CVE-2011-0188 issue.
All Ruby users should upgrade to these updated packages, which contain backported patches to resolve these issues.
-
Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
-
Bugs fixed (http://bugzilla.redhat.com/):
678913 - CVE-2011-1004 Ruby: Symlink race condition by removing directory trees in fileutils module 678920 - CVE-2011-1005 Ruby: Untrusted codes able to modify arbitrary strings 682332 - CVE-2011-0188 ruby: memory corruption in BigDecimal on 64bit platforms
- Package List:
Red Hat Enterprise Linux Desktop (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Client/en/os/SRPMS/ruby-1.8.7.299-7.el6_1.1.src.rpm
i386: ruby-1.8.7.299-7.el6_1.1.i686.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm ruby-irb-1.8.7.299-7.el6_1.1.i686.rpm ruby-libs-1.8.7.299-7.el6_1.1.i686.rpm
x86_64: ruby-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-irb-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-libs-1.8.7.299-7.el6_1.1.i686.rpm ruby-libs-1.8.7.299-7.el6_1.1.x86_64.rpm
Red Hat Enterprise Linux Desktop Optional (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Client/en/os/SRPMS/ruby-1.8.7.299-7.el6_1.1.src.rpm
i386: ruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm ruby-devel-1.8.7.299-7.el6_1.1.i686.rpm ruby-docs-1.8.7.299-7.el6_1.1.i686.rpm ruby-rdoc-1.8.7.299-7.el6_1.1.i686.rpm ruby-ri-1.8.7.299-7.el6_1.1.i686.rpm ruby-static-1.8.7.299-7.el6_1.1.i686.rpm ruby-tcltk-1.8.7.299-7.el6_1.1.i686.rpm
x86_64: ruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-devel-1.8.7.299-7.el6_1.1.i686.rpm ruby-devel-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-docs-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-rdoc-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-ri-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-static-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-tcltk-1.8.7.299-7.el6_1.1.x86_64.rpm
Red Hat Enterprise Linux HPC Node Optional (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6ComputeNode/en/os/SRPMS/ruby-1.8.7.299-7.el6_1.1.src.rpm
x86_64: ruby-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-devel-1.8.7.299-7.el6_1.1.i686.rpm ruby-devel-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-docs-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-irb-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-libs-1.8.7.299-7.el6_1.1.i686.rpm ruby-libs-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-rdoc-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-ri-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-static-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-tcltk-1.8.7.299-7.el6_1.1.x86_64.rpm
Red Hat Enterprise Linux Server (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/ruby-1.8.7.299-7.el6_1.1.src.rpm
i386: ruby-1.8.7.299-7.el6_1.1.i686.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm ruby-irb-1.8.7.299-7.el6_1.1.i686.rpm ruby-libs-1.8.7.299-7.el6_1.1.i686.rpm
ppc64: ruby-1.8.7.299-7.el6_1.1.ppc64.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.ppc.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.ppc64.rpm ruby-irb-1.8.7.299-7.el6_1.1.ppc64.rpm ruby-libs-1.8.7.299-7.el6_1.1.ppc.rpm ruby-libs-1.8.7.299-7.el6_1.1.ppc64.rpm
s390x: ruby-1.8.7.299-7.el6_1.1.s390x.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.s390.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.s390x.rpm ruby-irb-1.8.7.299-7.el6_1.1.s390x.rpm ruby-libs-1.8.7.299-7.el6_1.1.s390.rpm ruby-libs-1.8.7.299-7.el6_1.1.s390x.rpm
x86_64: ruby-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-irb-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-libs-1.8.7.299-7.el6_1.1.i686.rpm ruby-libs-1.8.7.299-7.el6_1.1.x86_64.rpm
Red Hat Enterprise Linux Server Optional (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/ruby-1.8.7.299-7.el6_1.1.src.rpm
i386: ruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm ruby-devel-1.8.7.299-7.el6_1.1.i686.rpm ruby-docs-1.8.7.299-7.el6_1.1.i686.rpm ruby-rdoc-1.8.7.299-7.el6_1.1.i686.rpm ruby-ri-1.8.7.299-7.el6_1.1.i686.rpm ruby-static-1.8.7.299-7.el6_1.1.i686.rpm ruby-tcltk-1.8.7.299-7.el6_1.1.i686.rpm
ppc64: ruby-debuginfo-1.8.7.299-7.el6_1.1.ppc.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.ppc64.rpm ruby-devel-1.8.7.299-7.el6_1.1.ppc.rpm ruby-devel-1.8.7.299-7.el6_1.1.ppc64.rpm ruby-docs-1.8.7.299-7.el6_1.1.ppc64.rpm ruby-rdoc-1.8.7.299-7.el6_1.1.ppc64.rpm ruby-ri-1.8.7.299-7.el6_1.1.ppc64.rpm ruby-static-1.8.7.299-7.el6_1.1.ppc64.rpm ruby-tcltk-1.8.7.299-7.el6_1.1.ppc64.rpm
s390x: ruby-debuginfo-1.8.7.299-7.el6_1.1.s390.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.s390x.rpm ruby-devel-1.8.7.299-7.el6_1.1.s390.rpm ruby-devel-1.8.7.299-7.el6_1.1.s390x.rpm ruby-docs-1.8.7.299-7.el6_1.1.s390x.rpm ruby-rdoc-1.8.7.299-7.el6_1.1.s390x.rpm ruby-ri-1.8.7.299-7.el6_1.1.s390x.rpm ruby-static-1.8.7.299-7.el6_1.1.s390x.rpm ruby-tcltk-1.8.7.299-7.el6_1.1.s390x.rpm
x86_64: ruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-devel-1.8.7.299-7.el6_1.1.i686.rpm ruby-devel-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-docs-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-rdoc-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-ri-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-static-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-tcltk-1.8.7.299-7.el6_1.1.x86_64.rpm
Red Hat Enterprise Linux Workstation (v. 6):
Source: ftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/ruby-1.8.7.299-7.el6_1.1.src.rpm
i386: ruby-1.8.7.299-7.el6_1.1.i686.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm ruby-irb-1.8.7.299-7.el6_1.1.i686.rpm ruby-libs-1.8.7.299-7.el6_1.1.i686.rpm
x86_64: ruby-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm ruby-debuginfo-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-irb-1.8.7.299-7.el6_1.1.x86_64.rpm ruby-libs-1.8.7.299-7.el6_1.1.i686.rpm ruby-libs-1.8.7.299-7.el6_1.1.x86_64.rpm
Red Hat Enterprise Linux Workstation Optional (v. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package
- References:
https://www.redhat.com/security/data/cve/CVE-2011-0188.html https://www.redhat.com/security/data/cve/CVE-2011-1004.html https://www.redhat.com/security/data/cve/CVE-2011-1005.html https://access.redhat.com/security/updates/classification/#moderate http://www.ruby-lang.org/en/news/2011/02/18/fileutils-is-vulnerable-to-symlink-race-attacks/ http://www.ruby-lang.org/en/news/2011/02/18/exception-methods-can-bypass-safe/
- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux)
iD8DBQFOChFrXlSAg2UNWIIRAqVDAKC4AQkDB5prIP2m6NnD6qfX0sYGkACeOH7K 8UV4ULTNCtKEbwxTKay8Ilk= =Nsw7 -----END PGP SIGNATURE-----
-- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . ----------------------------------------------------------------------
Meet Secunia @ Microsoft Management Summit (MMS) in Las Vegas, USA (21-25 March).
http://secunia.com/company/events/mms_2011/
TITLE: Apple Mac OS X Multiple Vulnerabilities
SECUNIA ADVISORY ID: SA43814
VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/43814/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=43814
RELEASE DATE: 2011-03-22
DISCUSS ADVISORY: http://secunia.com/advisories/43814/#comments
AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)
http://secunia.com/advisories/43814/
ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS
https://ca.secunia.com/?page=viewadvisory&vuln_id=43814
ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING
http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
DESCRIPTION: Apple has issued a security update for Mac OS X, which fixes multiple vulnerabilities.
1) A divide-by-zero error in AirPort when handling Wi-Fi frames can be exploited to cause a system reset.
2) Multiple vulnerabilities in Apache can be exploited by malicious people to disclose potentially sensitive information and by malicious users and malicious people to cause a DoS (Denial of Service).
For more information: SA40206
3) A format string error within AppleScript Studio when handling certain commands via dialogs can be exploited to potentially execute arbitrary code.
4) An unspecified error in the handling of embedded OpenType fonts in Apple Type Services (ATS) can be exploited to cause a heap-based buffer overflow when a specially crafted document is viewed or downloaded.
5) Multiple unspecified errors in the handling of embedded TrueType fonts in Apple Type Services (ATS) can be exploited to cause a buffer overflow when a specially crafted document is viewed or downloaded.
6) Multiple unspecified errors in the handling of embedded Type 1 fonts in Apple Type Services (ATS) can be exploited to cause a buffer overflow when a specially crafted document is viewed or downloaded.
7) Multiple unspecified errors in the handling of SFNT tables in embedded fonts in Apple Type Services (ATS) can be exploited to cause a buffer overflow when a specially crafted document is viewed or downloaded.
8) An integer overflow error in bzip2 can be exploited to terminate an application using the library or execute arbitrary code via a specially crafted archive.
For more information: SA41452
9) An error within the "FSFindFolder()" API in CarbonCore when used with the "kTemporaryFolderType" flag can be exploited to disclose the contents of arbitrary directories.
10) Multiple errors in ClamAV can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
For more information: SA41503 SA42426
11) An unspecified error in the handling of embedded fonts in CoreText can be exploited to corrupt memory when a specially crafted document is viewed or downloaded.
12) An integer overflow error within the handling of the F_READBOOTSTRAP ioctl in HFS, HFS+, and HFS+J filesystems can be exploited to read arbitrary files.
13) An error in ImageIO within the handling of JPEG files can be exploited to cause a heap-based buffer overflow.
14) An integer overflow error in ImageIO within the handling of XBM files can be exploited to potentially execute arbitrary code.
15) An error in libTIFF within the handling of JPEG encoded TIFF files can be exploited to cause a buffer overflow.
16) An error in libTIFF within the handling of CCITT Group 4 encoded TIFF files can be exploited to cause a buffer overflow.
17) An integer overflow error in ImageIO within the handling of JPEG encoded TIFF files can be exploited to potentially execute arbitrary code.
18) Multiple errors in Image RAW when handling Canon RAW image files can be exploited to cause buffer overflows.
19) An error in the Install Helper when handling URLs can be exploited to install an arbitrary agent by tricking the user into visiting a malicious website.
20) Multiple errors in Kerberos can be exploited by malicious users and malicious people to conduct spoofing attacks and bypass certain security features.
For more information: SA37977 SA42396
21) An error within the "i386_set_ldt()" system call can be exploited by malicious, local users to execute arbitrary code with system privileges.
22) An integer truncation error within Libinfo when handling NFS RPC packets can be exploited to cause NFS RPC services to become unresponsive.
23) An error exists in the libxml library when traversing the XPath.
For more information: SA42175
24) A double free error exists in the libxml library when handling XPath expressions.
For more information: SA42721
25) Two errors in Mailman can be exploited by malicious users to conduct script insertion attacks.
For more information: SA41265
26) Multiple errors in PHP can be exploited by malicious users and malicious people to bypass certain security restrictions and by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
For more information: SA39573 SA41724
27) Multiple errors in PHP can be exploited by malicious users and malicious people to bypass certain security restrictions.
For more information: SA41724
28) An error in the OfficeImport framework when processing records containing formulas shared between multiple cells can be exploited to corrupt memory and potentially execute arbitrary code.
29) An error in QuickLook when handling certain Microsoft Office files can be exploited to corrupt memory when a specially crafted document is downloaded.
30) Multiple unspecified errors in QuickTime when handling JPEG2000, FlashPix, and panorama atoms in QTVR (QuickTime Virtual Reality) movie files can be exploited to corrupt memory via specially crafted files.
31) An integer overflow error in QuickTime when handling certain movie files can be exploited to potentially execute arbitrary code when a specially crafted file is viewed.
32) An error within QuickTime plug-in when handling cross-site redirects can be exploited to disclose video data.
This vulnerability only affects 64-bit Ruby processes.
34) A boundary error in Samba can be exploited by malicious people to potentially compromise a vulnerable system.
For more information: SA41354
35) A security issue in Subversion can be exploited by malicious people to bypass certain security restrictions.
For more information: SA41652
36) A weakness in Terminal uses SSH version 1 as the default protocol version when using ssh via the "New Remote Connection" dialog.
For more information: SA41738
SOLUTION: Update to version 10.6.7 or apply Security Update 2011-001.
PROVIDED AND/OR DISCOVERED BY: 15, 16, 33) Reported by the vendor.
The vendor credits: 3) Alexander Strange. 5) Christoph Diehl of Mozilla, Felix Grobert of the Google Security Team, Marc Schoenefeld of Red Hat Security Response Team, and Tavis Ormandy and Will Drewry of Google Security Team. 6) Felix Grobert, Google Security Team and geekable via ZDI. 7) Marc Schoenefeld, Red Hat Security Response Team. 11) Christoph Diehl, Mozilla. 12) Dan Rosenberg, Virtual Security Research. 13) Andrzej Dyjak via iDefense. 14) Harry Sintonen. 17) Dominic Chell, NGS Secure. 18) Paul Harrington, NGS Secure. 19) Aaron Sigel, vtty.com. 21) Jeff Mears. 22) Peter Schwenk, University of Delaware. 28) Tobias Klein via iDefense. 29) Charlie Miller and Dion Blazakis via ZDI. 30) Will Dormann of CERT/CC, Damian Put and an anonymous researcher via ZDI, and Rodrigo Rubira Branco of Check Point Vulnerability Discovery Team. 31) Honggang Ren, Fortinet's FortiGuard Labs. 32) Nirankush Panchbhai and Microsoft Vulnerability Research (MSVR). 36) Matt Warren, HNW Inc.
ORIGINAL ADVISORY: Apple: http://support.apple.com/kb/HT4581
iDefense: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=898
OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/
DEEP LINKS: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/
EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/
EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/
EXPLOIT: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/
About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/advisories/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
. Content-Disposition: inline
============================================================================ Ubuntu Security Notice USN-1377-1 February 28, 2012
ruby1.8 vulnerabilities
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 11.10
- Ubuntu 11.04
- Ubuntu 10.10
- Ubuntu 10.04 LTS
Summary:
Several security issues were fixed in ruby1.8.
Software Description: - ruby1.8: Interpreter of object-oriented scripting language Ruby 1.8
Details:
Drew Yao discovered that the WEBrick HTTP server was vulnerable to cross-site scripting attacks when displaying error pages. (CVE-2010-0541)
Drew Yao discovered that Ruby's BigDecimal module did not properly allocate memory on 64-bit platforms. (CVE-2011-0188)
Nicholas Jefferson discovered that the FileUtils.remove_entry_secure method in Ruby did not properly remove non-empty directories. (CVE-2011-1004)
It was discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. (CVE-2011-1005)
Eric Wong discovered that Ruby does not properly reseed its pseudorandom number generator when creating child processes. An attacker could use this flaw to gain knowledge of the random numbers used in other Ruby child processes. (CVE-2011-2686)
Eric Wong discovered that the SecureRandom module in Ruby did not properly seed its pseudorandom number generator. An attacker could use this flaw to gain knowledge of the random numbers used by another Ruby process with the same process ID number. (CVE-2011-2705)
Alexander Klink and Julian W=E4lde discovered that Ruby computed hash values without restricting the ability to trigger hash collisions predictably. A remote attacker could cause a denial of service by crafting values used in hash tables. (CVE-2011-4815)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 11.10: libruby1.8 1.8.7.352-2ubuntu0.1 ruby1.8 1.8.7.352-2ubuntu0.1
Ubuntu 11.04: libruby1.8 1.8.7.302-2ubuntu0.1 ruby1.8 1.8.7.302-2ubuntu0.1
Ubuntu 10.10: libruby1.8 1.8.7.299-2ubuntu0.1 ruby1.8 1.8.7.299-2ubuntu0.1
Ubuntu 10.04 LTS: libruby1.8 1.8.7.249-2ubuntu0.1 ruby1.8 1.8.7.249-2ubuntu0.1
In general, a standard system update will make all the necessary changes
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201103-0287",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "ruby",
"scope": "lte",
"trust": 1.8,
"vendor": "ruby lang",
"version": "1.9.2-p136"
},
{
"model": "ruby",
"scope": "eq",
"trust": 1.6,
"vendor": "ruby lang",
"version": "1.9.0-20070709"
},
{
"model": "ruby",
"scope": "eq",
"trust": 1.6,
"vendor": "ruby lang",
"version": "1.9.0-2"
},
{
"model": "ruby",
"scope": "eq",
"trust": 1.6,
"vendor": "ruby lang",
"version": "1.9.2"
},
{
"model": "ruby",
"scope": "eq",
"trust": 1.6,
"vendor": "ruby lang",
"version": "1.9.1"
},
{
"model": "ruby",
"scope": "eq",
"trust": 1.6,
"vendor": "ruby lang",
"version": "1.9.0-1"
},
{
"model": "ruby",
"scope": "eq",
"trust": 1.6,
"vendor": "ruby lang",
"version": "1.9.0-20060415"
},
{
"model": "ruby",
"scope": "eq",
"trust": 1.6,
"vendor": "ruby lang",
"version": "1.9.0"
},
{
"model": "ruby",
"scope": "eq",
"trust": 1.0,
"vendor": "ruby lang",
"version": "1.9.0-0"
},
{
"model": "ruby",
"scope": "eq",
"trust": 1.0,
"vendor": "ruby lang",
"version": "1.9"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "v10.5.8"
},
{
"model": "mac os x",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "v10.6 to v10.6.6"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "v10.5.8"
},
{
"model": "mac os x server",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "v10.6 to v10.6.6"
},
{
"model": "asianux server",
"scope": "eq",
"trust": 0.8,
"vendor": "cybertrust",
"version": "3 (x86)"
},
{
"model": "asianux server",
"scope": "eq",
"trust": 0.8,
"vendor": "cybertrust",
"version": "3 (x86-64)"
},
{
"model": "asianux server",
"scope": "eq",
"trust": 0.8,
"vendor": "cybertrust",
"version": "4.0"
},
{
"model": "asianux server",
"scope": "eq",
"trust": 0.8,
"vendor": "cybertrust",
"version": "4.0 (x86-64)"
},
{
"model": "enterprise linux desktop",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "6"
},
{
"model": "enterprise linux hpc node",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "6"
},
{
"model": "enterprise linux server",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "6"
},
{
"model": "enterprise linux server eus",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "6.1.z"
},
{
"model": "enterprise linux workstation",
"scope": "eq",
"trust": 0.8,
"vendor": "red hat",
"version": "6"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-001413"
},
{
"db": "CNNVD",
"id": "CNNVD-201103-298"
},
{
"db": "NVD",
"id": "CVE-2011-0188"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:ruby-lang:ruby",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:apple:mac_os_x",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:apple:mac_os_x_server",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:misc:miraclelinux_asianux_server",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:redhat:enterprise_linux_desktop",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:redhat:enterprise_linux_hpc_node",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:redhat:enterprise_linux_server",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/a:redhat:rhel_server_eus",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:redhat:enterprise_linux_workstation",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-001413"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Red Hat",
"sources": [
{
"db": "PACKETSTORM",
"id": "102622"
},
{
"db": "PACKETSTORM",
"id": "102628"
},
{
"db": "PACKETSTORM",
"id": "102620"
}
],
"trust": 0.3
},
"cve": "CVE-2011-0188",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "CVE-2011-0188",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 6.8,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 8.6,
"id": "VHN-48133",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2011-0188",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2011-0188",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-201103-298",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-48133",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-48133"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001413"
},
{
"db": "CNNVD",
"id": "CNNVD-201103-298"
},
{
"db": "NVD",
"id": "CVE-2011-0188"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The VpMemAlloc function in bigdecimal.c in the BigDecimal class in Ruby 1.9.2-p136 and earlier, as used on Apple Mac OS X before 10.6.7 and other platforms, does not properly allocate memory, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving creation of a large BigDecimal value within a 64-bit process, related to an \"integer truncation issue.\". Apple Mac OS X is a dedicated operating system developed by Apple for Mac computers. \n \n The safe-level feature in Ruby allows context-dependent attackers\n to modify strings via the Exception#to_s method, as demonstrated by\n changing an intended pathname (CVE-2011-1005). (CVE-2011-0188). \n \n Packages for 2009.0 are provided as of the Extended Maintenance\n Program. Please visit this link to learn more:\n http://store.mandriva.com/product_info.php?cPath=149\u0026amp;products_id=490\n \n The updated packages have been patched to correct this issue. The verification\n of md5 checksums and GPG signatures is performed automatically for you. \n\n All packages are signed by Mandriva for security. You can obtain the\n GPG public key of the Mandriva Security Team by executing:\n\n gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98\n\n You can view other update advisories for Mandriva Linux at:\n\n http://www.mandriva.com/security/advisories\n\n If you want to report vulnerabilities, please contact\n\n security_(at)_mandriva.com\n _______________________________________________________________________\n\n Type Bits/KeyID Date User ID\n pub 1024D/22458A98 2000-07-10 Mandriva Security Team\n \u003csecurity*mandriva.com\u003e\n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.9 (GNU/Linux)\n\niD8DBQFN2jqhmqjQ0CJFipgRAlnKAKDcf6I3beHFSSrX86ob/PzT+NwtxgCeNgsq\nuMw3t7u8fkmaD51bIO3CaIw=\n=yXr+\n-----END PGP SIGNATURE-----\n\n_______________________________________________\nFull-Disclosure - We believe in it. \nCharter: http://lists.grok.org.uk/full-disclosure-charter.html\nHosted and sponsored by Secunia - http://secunia.com/\n. \n(CVE-2011-1004)\n\nIt was found that WEBrick (the Ruby HTTP server toolkit) did not filter\nterminal escape sequences from its log files. A remote attacker could use\nspecially-crafted HTTP requests to inject terminal escape sequences into\nthe WEBrick log files. If a victim viewed the log files with a terminal\nemulator, it could result in control characters being executed with the\nprivileges of that user. (CVE-2009-4492)\n\nA cross-site scripting (XSS) flaw was found in the way WEBrick displayed\nerror pages. A remote attacker could use this flaw to perform a cross-site\nscripting attack against victims by tricking them into visiting a\nspecially-crafted URL. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nGentoo Linux Security Advisory GLSA 201412-27\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n http://security.gentoo.org/\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\n Severity: Normal\n Title: Ruby: Denial of Service\n Date: December 13, 2014\n Bugs: #355439, #369141, #396301, #437366, #442580, #458776,\n #492282, #527084, #529216\n ID: 201412-27\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nSynopsis\n========\n\nMultiple vulnerabilities have been found in Ruby, allowing\ncontext-dependent attackers to cause a Denial of Service condition. \n\nAffected packages\n=================\n\n -------------------------------------------------------------------\n Package / Vulnerable / Unaffected\n -------------------------------------------------------------------\n 1 dev-lang/ruby \u003c 2.0.0_p598 *\u003e= 1.9.3_p551\n \u003e= 2.0.0_p598\n\nDescription\n===========\n\nMultiple vulnerabilities have been discovered in Ruby. Please review\nthe CVE identifiers referenced below for details. \n\nWorkaround\n==========\n\nThere is no known workaround at this time. \n\nResolution\n==========\n\nAll Ruby 1.9 users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot --verbose \"\u003e=dev-lang/ruby-1.9.3_p551\"\n\nAll Ruby 2.0 users should upgrade to the latest version:\n\n # emerge --sync\n # emerge --ask --oneshot --verbose \"\u003e=dev-lang/ruby-2.0.0_p598\"\n\nReferences\n==========\n\n[ 1 ] CVE-2011-0188\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-0188\n[ 2 ] CVE-2011-1004\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1004\n[ 3 ] CVE-2011-1005\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-1005\n[ 4 ] CVE-2011-4815\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2011-4815\n[ 5 ] CVE-2012-4481\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-4481\n[ 6 ] CVE-2012-5371\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5371\n[ 7 ] CVE-2013-0269\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-0269\n[ 8 ] CVE-2013-1821\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-1821\n[ 9 ] CVE-2013-4164\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-4164\n[ 10 ] CVE-2014-8080\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-8080\n[ 11 ] CVE-2014-8090\n http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-8090\n\nAvailability\n============\n\nThis GLSA and any updates to it are available for viewing at\nthe Gentoo Security Website:\n\n http://security.gentoo.org/glsa/glsa-201412-27.xml\n\nConcerns?\n=========\n\nSecurity is a primary focus of Gentoo Linux and ensuring the\nconfidentiality and security of our users\u0027 machines is of utmost\nimportance to us. Any security concerns should be addressed to\nsecurity@gentoo.org or alternatively, you may file a bug at\nhttps://bugs.gentoo.org. \n\nLicense\n=======\n\nCopyright 2014 Gentoo Foundation, Inc; referenced text\nbelongs to its owner(s). \n\nThe contents of this document are licensed under the\nCreative Commons - Attribution / Share Alike license. \n\nhttp://creativecommons.org/licenses/by-sa/2.5\n. -----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA1\n\n=====================================================================\n Red Hat Security Advisory\n\nSynopsis: Moderate: ruby security update\nAdvisory ID: RHSA-2011:0910-01\nProduct: Red Hat Enterprise Linux\nAdvisory URL: https://rhn.redhat.com/errata/RHSA-2011-0910.html\nIssue date: 2011-06-28\nCVE Names: CVE-2011-0188 CVE-2011-1004 CVE-2011-1005 \n=====================================================================\n\n1. Summary:\n\nUpdated ruby packages that fix three security issues are now available for\nRed Hat Enterprise Linux 6. Common Vulnerability Scoring System (CVSS) base scores,\nwhich give detailed severity ratings, are available for each vulnerability\nfrom the CVE links in the References section. \n\n2. Relevant releases/architectures:\n\nRed Hat Enterprise Linux Desktop (v. 6) - i386, x86_64\nRed Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64\nRed Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64\nRed Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64\nRed Hat Enterprise Linux Server Optional (v. 6) - i386, ppc64, s390x, x86_64\nRed Hat Enterprise Linux Workstation (v. 6) - i386, x86_64\nRed Hat Enterprise Linux Workstation Optional (v. 6) - i386, x86_64\n\n3. Description:\n\nRuby is an extensible, interpreted, object-oriented, scripting language. It\nhas features to process text files and to do system management tasks. \n\nA flaw was found in the way large amounts of memory were allocated on\n64-bit systems when using the BigDecimal class. This issue did not affect 32-bit systems. (CVE-2011-0188)\n\nA race condition flaw was found in the remove system entries method in the\nFileUtils module. If a local user ran a Ruby script that uses this method,\na local attacker could use this flaw to delete arbitrary files and\ndirectories accessible to that user via a symbolic link attack. \n(CVE-2011-1004)\n\nA flaw was found in the method for translating an exception message into a\nstring in the Exception class. A remote attacker could use this flaw to\nbypass safe level 4 restrictions, allowing untrusted (tainted) code to\nmodify arbitrary, trusted (untainted) strings, which safe level 4\nrestrictions would otherwise prevent. (CVE-2011-1005)\n\nRed Hat would like to thank Drew Yao of Apple Product Security for\nreporting the CVE-2011-0188 issue. \n\nAll Ruby users should upgrade to these updated packages, which contain\nbackported patches to resolve these issues. \n\n4. Details on how to\nuse the Red Hat Network to apply this update are available at\nhttps://access.redhat.com/kb/docs/DOC-11259\n\n5. Bugs fixed (http://bugzilla.redhat.com/):\n\n678913 - CVE-2011-1004 Ruby: Symlink race condition by removing directory trees in fileutils module\n678920 - CVE-2011-1005 Ruby: Untrusted codes able to modify arbitrary strings\n682332 - CVE-2011-0188 ruby: memory corruption in BigDecimal on 64bit platforms\n\n6. Package List:\n\nRed Hat Enterprise Linux Desktop (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Client/en/os/SRPMS/ruby-1.8.7.299-7.el6_1.1.src.rpm\n\ni386:\nruby-1.8.7.299-7.el6_1.1.i686.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm\nruby-irb-1.8.7.299-7.el6_1.1.i686.rpm\nruby-libs-1.8.7.299-7.el6_1.1.i686.rpm\n\nx86_64:\nruby-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-irb-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-libs-1.8.7.299-7.el6_1.1.i686.rpm\nruby-libs-1.8.7.299-7.el6_1.1.x86_64.rpm\n\nRed Hat Enterprise Linux Desktop Optional (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Client/en/os/SRPMS/ruby-1.8.7.299-7.el6_1.1.src.rpm\n\ni386:\nruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm\nruby-devel-1.8.7.299-7.el6_1.1.i686.rpm\nruby-docs-1.8.7.299-7.el6_1.1.i686.rpm\nruby-rdoc-1.8.7.299-7.el6_1.1.i686.rpm\nruby-ri-1.8.7.299-7.el6_1.1.i686.rpm\nruby-static-1.8.7.299-7.el6_1.1.i686.rpm\nruby-tcltk-1.8.7.299-7.el6_1.1.i686.rpm\n\nx86_64:\nruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-devel-1.8.7.299-7.el6_1.1.i686.rpm\nruby-devel-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-docs-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-rdoc-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-ri-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-static-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-tcltk-1.8.7.299-7.el6_1.1.x86_64.rpm\n\nRed Hat Enterprise Linux HPC Node Optional (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6ComputeNode/en/os/SRPMS/ruby-1.8.7.299-7.el6_1.1.src.rpm\n\nx86_64:\nruby-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-devel-1.8.7.299-7.el6_1.1.i686.rpm\nruby-devel-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-docs-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-irb-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-libs-1.8.7.299-7.el6_1.1.i686.rpm\nruby-libs-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-rdoc-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-ri-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-static-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-tcltk-1.8.7.299-7.el6_1.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/ruby-1.8.7.299-7.el6_1.1.src.rpm\n\ni386:\nruby-1.8.7.299-7.el6_1.1.i686.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm\nruby-irb-1.8.7.299-7.el6_1.1.i686.rpm\nruby-libs-1.8.7.299-7.el6_1.1.i686.rpm\n\nppc64:\nruby-1.8.7.299-7.el6_1.1.ppc64.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.ppc.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.ppc64.rpm\nruby-irb-1.8.7.299-7.el6_1.1.ppc64.rpm\nruby-libs-1.8.7.299-7.el6_1.1.ppc.rpm\nruby-libs-1.8.7.299-7.el6_1.1.ppc64.rpm\n\ns390x:\nruby-1.8.7.299-7.el6_1.1.s390x.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.s390.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.s390x.rpm\nruby-irb-1.8.7.299-7.el6_1.1.s390x.rpm\nruby-libs-1.8.7.299-7.el6_1.1.s390.rpm\nruby-libs-1.8.7.299-7.el6_1.1.s390x.rpm\n\nx86_64:\nruby-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-irb-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-libs-1.8.7.299-7.el6_1.1.i686.rpm\nruby-libs-1.8.7.299-7.el6_1.1.x86_64.rpm\n\nRed Hat Enterprise Linux Server Optional (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Server/en/os/SRPMS/ruby-1.8.7.299-7.el6_1.1.src.rpm\n\ni386:\nruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm\nruby-devel-1.8.7.299-7.el6_1.1.i686.rpm\nruby-docs-1.8.7.299-7.el6_1.1.i686.rpm\nruby-rdoc-1.8.7.299-7.el6_1.1.i686.rpm\nruby-ri-1.8.7.299-7.el6_1.1.i686.rpm\nruby-static-1.8.7.299-7.el6_1.1.i686.rpm\nruby-tcltk-1.8.7.299-7.el6_1.1.i686.rpm\n\nppc64:\nruby-debuginfo-1.8.7.299-7.el6_1.1.ppc.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.ppc64.rpm\nruby-devel-1.8.7.299-7.el6_1.1.ppc.rpm\nruby-devel-1.8.7.299-7.el6_1.1.ppc64.rpm\nruby-docs-1.8.7.299-7.el6_1.1.ppc64.rpm\nruby-rdoc-1.8.7.299-7.el6_1.1.ppc64.rpm\nruby-ri-1.8.7.299-7.el6_1.1.ppc64.rpm\nruby-static-1.8.7.299-7.el6_1.1.ppc64.rpm\nruby-tcltk-1.8.7.299-7.el6_1.1.ppc64.rpm\n\ns390x:\nruby-debuginfo-1.8.7.299-7.el6_1.1.s390.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.s390x.rpm\nruby-devel-1.8.7.299-7.el6_1.1.s390.rpm\nruby-devel-1.8.7.299-7.el6_1.1.s390x.rpm\nruby-docs-1.8.7.299-7.el6_1.1.s390x.rpm\nruby-rdoc-1.8.7.299-7.el6_1.1.s390x.rpm\nruby-ri-1.8.7.299-7.el6_1.1.s390x.rpm\nruby-static-1.8.7.299-7.el6_1.1.s390x.rpm\nruby-tcltk-1.8.7.299-7.el6_1.1.s390x.rpm\n\nx86_64:\nruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-devel-1.8.7.299-7.el6_1.1.i686.rpm\nruby-devel-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-docs-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-rdoc-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-ri-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-static-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-tcltk-1.8.7.299-7.el6_1.1.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation (v. 6):\n\nSource:\nftp://ftp.redhat.com/pub/redhat/linux/enterprise/6Workstation/en/os/SRPMS/ruby-1.8.7.299-7.el6_1.1.src.rpm\n\ni386:\nruby-1.8.7.299-7.el6_1.1.i686.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm\nruby-irb-1.8.7.299-7.el6_1.1.i686.rpm\nruby-libs-1.8.7.299-7.el6_1.1.i686.rpm\n\nx86_64:\nruby-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.i686.rpm\nruby-debuginfo-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-irb-1.8.7.299-7.el6_1.1.x86_64.rpm\nruby-libs-1.8.7.299-7.el6_1.1.i686.rpm\nruby-libs-1.8.7.299-7.el6_1.1.x86_64.rpm\n\nRed Hat Enterprise Linux Workstation Optional (v. Our key and \ndetails on how to verify the signature are available from\nhttps://access.redhat.com/security/team/key/#package\n\n7. References:\n\nhttps://www.redhat.com/security/data/cve/CVE-2011-0188.html\nhttps://www.redhat.com/security/data/cve/CVE-2011-1004.html\nhttps://www.redhat.com/security/data/cve/CVE-2011-1005.html\nhttps://access.redhat.com/security/updates/classification/#moderate\nhttp://www.ruby-lang.org/en/news/2011/02/18/fileutils-is-vulnerable-to-symlink-race-attacks/\nhttp://www.ruby-lang.org/en/news/2011/02/18/exception-methods-can-bypass-safe/\n\n8. \n-----BEGIN PGP SIGNATURE-----\nVersion: GnuPG v1.4.4 (GNU/Linux)\n\niD8DBQFOChFrXlSAg2UNWIIRAqVDAKC4AQkDB5prIP2m6NnD6qfX0sYGkACeOH7K\n8UV4ULTNCtKEbwxTKay8Ilk=\n=Nsw7\n-----END PGP SIGNATURE-----\n\n\n--\nRHSA-announce mailing list\nRHSA-announce@redhat.com\nhttps://www.redhat.com/mailman/listinfo/rhsa-announce\n. ----------------------------------------------------------------------\n\n\nMeet Secunia @ Microsoft Management Summit (MMS) in Las Vegas, USA (21-25 March). \n\nhttp://secunia.com/company/events/mms_2011/\n\n\n----------------------------------------------------------------------\n\nTITLE:\nApple Mac OS X Multiple Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA43814\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/43814/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=43814\n\nRELEASE DATE:\n2011-03-22\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/43814/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/43814/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=43814\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nApple has issued a security update for Mac OS X, which fixes multiple\nvulnerabilities. \n\n1) A divide-by-zero error in AirPort when handling Wi-Fi frames can\nbe exploited to cause a system reset. \n\n2) Multiple vulnerabilities in Apache can be exploited by malicious\npeople to disclose potentially sensitive information and by malicious\nusers and malicious people to cause a DoS (Denial of Service). \n\nFor more information:\nSA40206\n\n3) A format string error within AppleScript Studio when handling\ncertain commands via dialogs can be exploited to potentially execute\narbitrary code. \n\n4) An unspecified error in the handling of embedded OpenType fonts in\nApple Type Services (ATS) can be exploited to cause a heap-based\nbuffer overflow when a specially crafted document is viewed or\ndownloaded. \n\n5) Multiple unspecified errors in the handling of embedded TrueType\nfonts in Apple Type Services (ATS) can be exploited to cause a buffer\noverflow when a specially crafted document is viewed or downloaded. \n\n6) Multiple unspecified errors in the handling of embedded Type 1\nfonts in Apple Type Services (ATS) can be exploited to cause a buffer\noverflow when a specially crafted document is viewed or downloaded. \n\n7) Multiple unspecified errors in the handling of SFNT tables in\nembedded fonts in Apple Type Services (ATS) can be exploited to cause\na buffer overflow when a specially crafted document is viewed or\ndownloaded. \n\n8) An integer overflow error in bzip2 can be exploited to terminate\nan application using the library or execute arbitrary code via a\nspecially crafted archive. \n\nFor more information:\nSA41452\n\n9) An error within the \"FSFindFolder()\" API in CarbonCore when used\nwith the \"kTemporaryFolderType\" flag can be exploited to disclose the\ncontents of arbitrary directories. \n\n10) Multiple errors in ClamAV can be exploited by malicious people to\ncause a DoS (Denial of Service) and potentially compromise a\nvulnerable system. \n\nFor more information:\nSA41503\nSA42426\n\n11) An unspecified error in the handling of embedded fonts in\nCoreText can be exploited to corrupt memory when a specially crafted\ndocument is viewed or downloaded. \n\n12) An integer overflow error within the handling of the\nF_READBOOTSTRAP ioctl in HFS, HFS+, and HFS+J filesystems can be\nexploited to read arbitrary files. \n\n13) An error in ImageIO within the handling of JPEG files can be\nexploited to cause a heap-based buffer overflow. \n\n14) An integer overflow error in ImageIO within the handling of XBM\nfiles can be exploited to potentially execute arbitrary code. \n\n15) An error in libTIFF within the handling of JPEG encoded TIFF\nfiles can be exploited to cause a buffer overflow. \n\n16) An error in libTIFF within the handling of CCITT Group 4 encoded\nTIFF files can be exploited to cause a buffer overflow. \n\n17) An integer overflow error in ImageIO within the handling of JPEG\nencoded TIFF files can be exploited to potentially execute arbitrary\ncode. \n\n18) Multiple errors in Image RAW when handling Canon RAW image files\ncan be exploited to cause buffer overflows. \n\n19) An error in the Install Helper when handling URLs can be\nexploited to install an arbitrary agent by tricking the user into\nvisiting a malicious website. \n\n20) Multiple errors in Kerberos can be exploited by malicious users\nand malicious people to conduct spoofing attacks and bypass certain\nsecurity features. \n\nFor more information:\nSA37977\nSA42396\n\n21) An error within the \"i386_set_ldt()\" system call can be exploited\nby malicious, local users to execute arbitrary code with system\nprivileges. \n\n22) An integer truncation error within Libinfo when handling NFS RPC\npackets can be exploited to cause NFS RPC services to become\nunresponsive. \n\n23) An error exists in the libxml library when traversing the XPath. \n\nFor more information:\nSA42175\n\n24) A double free error exists in the libxml library when handling\nXPath expressions. \n\nFor more information:\nSA42721\n\n25) Two errors in Mailman can be exploited by malicious users to\nconduct script insertion attacks. \n\nFor more information:\nSA41265\n\n26) Multiple errors in PHP can be exploited by malicious users and\nmalicious people to bypass certain security restrictions and by\nmalicious people to cause a DoS (Denial of Service) and potentially\ncompromise a vulnerable system. \n\nFor more information:\nSA39573\nSA41724\n\n27) Multiple errors in PHP can be exploited by malicious users and\nmalicious people to bypass certain security restrictions. \n\nFor more information:\nSA41724\n\n28) An error in the OfficeImport framework when processing records\ncontaining formulas shared between multiple cells can be exploited to\ncorrupt memory and potentially execute arbitrary code. \n\n29) An error in QuickLook when handling certain Microsoft Office\nfiles can be exploited to corrupt memory when a specially crafted\ndocument is downloaded. \n\n30) Multiple unspecified errors in QuickTime when handling JPEG2000,\nFlashPix, and panorama atoms in QTVR (QuickTime Virtual Reality)\nmovie files can be exploited to corrupt memory via specially crafted\nfiles. \n\n31) An integer overflow error in QuickTime when handling certain\nmovie files can be exploited to potentially execute arbitrary code\nwhen a specially crafted file is viewed. \n\n32) An error within QuickTime plug-in when handling cross-site\nredirects can be exploited to disclose video data. \n\nThis vulnerability only affects 64-bit Ruby processes. \n\n34) A boundary error in Samba can be exploited by malicious people to\npotentially compromise a vulnerable system. \n\nFor more information:\nSA41354\n\n35) A security issue in Subversion can be exploited by malicious\npeople to bypass certain security restrictions. \n\nFor more information:\nSA41652\n\n36) A weakness in Terminal uses SSH version 1 as the default protocol\nversion when using ssh via the \"New Remote Connection\" dialog. \n\nFor more information:\nSA41738\n\nSOLUTION:\nUpdate to version 10.6.7 or apply Security Update 2011-001. \n\nPROVIDED AND/OR DISCOVERED BY:\n15, 16, 33) Reported by the vendor. \n\nThe vendor credits:\n3) Alexander Strange. \n5) Christoph Diehl of Mozilla, Felix Grobert of the Google Security\nTeam, Marc Schoenefeld of Red Hat Security Response Team, and Tavis\nOrmandy and Will Drewry of Google Security Team. \n6) Felix Grobert, Google Security Team and geekable via ZDI. \n7) Marc Schoenefeld, Red Hat Security Response Team. \n11) Christoph Diehl, Mozilla. \n12) Dan Rosenberg, Virtual Security Research. \n13) Andrzej Dyjak via iDefense. \n14) Harry Sintonen. \n17) Dominic Chell, NGS Secure. \n18) Paul Harrington, NGS Secure. \n19) Aaron Sigel, vtty.com. \n21) Jeff Mears. \n22) Peter Schwenk, University of Delaware. \n28) Tobias Klein via iDefense. \n29) Charlie Miller and Dion Blazakis via ZDI. \n30) Will Dormann of CERT/CC, Damian Put and an anonymous researcher\nvia ZDI, and Rodrigo Rubira Branco of Check Point Vulnerability\nDiscovery Team. \n31) Honggang Ren, Fortinet\u0027s FortiGuard Labs. \n32) Nirankush Panchbhai and Microsoft Vulnerability Research (MSVR). \n36) Matt Warren, HNW Inc. \n\nORIGINAL ADVISORY:\nApple:\nhttp://support.apple.com/kb/HT4581\n\niDefense:\nhttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=898\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n. Content-Disposition: inline\n\n\n============================================================================\nUbuntu Security Notice USN-1377-1\nFebruary 28, 2012\n\nruby1.8 vulnerabilities\n============================================================================\n\nA security issue affects these releases of Ubuntu and its derivatives:\n\n- Ubuntu 11.10\n- Ubuntu 11.04\n- Ubuntu 10.10\n- Ubuntu 10.04 LTS\n\nSummary:\n\nSeveral security issues were fixed in ruby1.8. \n\nSoftware Description:\n- ruby1.8: Interpreter of object-oriented scripting language Ruby 1.8\n\nDetails:\n\nDrew Yao discovered that the WEBrick HTTP server was vulnerable to cross-site\nscripting attacks when displaying error pages. (CVE-2010-0541)\n\nDrew Yao discovered that Ruby\u0027s BigDecimal module did not properly allocate\nmemory on 64-bit platforms. \n(CVE-2011-0188)\n\nNicholas Jefferson discovered that the FileUtils.remove_entry_secure method in\nRuby did not properly remove non-empty directories. (CVE-2011-1004)\n\nIt was discovered that Ruby incorrectly allowed untainted strings to be\nmodified in protective safe levels. (CVE-2011-1005)\n\nEric Wong discovered that Ruby does not properly reseed its pseudorandom number\ngenerator when creating child processes. An attacker could use this flaw to\ngain knowledge of the random numbers used in other Ruby child processes. \n(CVE-2011-2686)\n\nEric Wong discovered that the SecureRandom module in Ruby did not properly seed\nits pseudorandom number generator. An attacker could use this flaw to gain\nknowledge of the random numbers used by another Ruby process with the same\nprocess ID number. (CVE-2011-2705)\n\nAlexander Klink and Julian W=E4lde discovered that Ruby computed hash values\nwithout restricting the ability to trigger hash collisions predictably. A\nremote attacker could cause a denial of service by crafting values used in hash\ntables. (CVE-2011-4815)\n\nUpdate instructions:\n\nThe problem can be corrected by updating your system to the following\npackage versions:\n\nUbuntu 11.10:\n libruby1.8 1.8.7.352-2ubuntu0.1\n ruby1.8 1.8.7.352-2ubuntu0.1\n\nUbuntu 11.04:\n libruby1.8 1.8.7.302-2ubuntu0.1\n ruby1.8 1.8.7.302-2ubuntu0.1\n\nUbuntu 10.10:\n libruby1.8 1.8.7.299-2ubuntu0.1\n ruby1.8 1.8.7.299-2ubuntu0.1\n\nUbuntu 10.04 LTS:\n libruby1.8 1.8.7.249-2ubuntu0.1\n ruby1.8 1.8.7.249-2ubuntu0.1\n\nIn general, a standard system update will make all the necessary changes",
"sources": [
{
"db": "NVD",
"id": "CVE-2011-0188"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001413"
},
{
"db": "VULHUB",
"id": "VHN-48133"
},
{
"db": "PACKETSTORM",
"id": "101616"
},
{
"db": "PACKETSTORM",
"id": "101615"
},
{
"db": "PACKETSTORM",
"id": "102622"
},
{
"db": "PACKETSTORM",
"id": "129551"
},
{
"db": "PACKETSTORM",
"id": "102628"
},
{
"db": "PACKETSTORM",
"id": "102620"
},
{
"db": "PACKETSTORM",
"id": "99616"
},
{
"db": "PACKETSTORM",
"id": "110262"
}
],
"trust": 2.43
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2011-0188",
"trust": 3.2
},
{
"db": "SECTRACK",
"id": "1025236",
"trust": 1.9
},
{
"db": "BID",
"id": "46966",
"trust": 0.9
},
{
"db": "SECUNIA",
"id": "44638",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001413",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201103-298",
"trust": 0.7
},
{
"db": "SECUNIA",
"id": "43814",
"trust": 0.7
},
{
"db": "NSFOCUS",
"id": "16613",
"trust": 0.6
},
{
"db": "NSFOCUS",
"id": "16871",
"trust": 0.6
},
{
"db": "APPLE",
"id": "APPLE-SA-2011-03-21-1",
"trust": 0.6
},
{
"db": "PACKETSTORM",
"id": "129551",
"trust": 0.2
},
{
"db": "PACKETSTORM",
"id": "102628",
"trust": 0.2
},
{
"db": "VULHUB",
"id": "VHN-48133",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "101616",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "101615",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "102622",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "102620",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "99616",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "110262",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-48133"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001413"
},
{
"db": "PACKETSTORM",
"id": "101616"
},
{
"db": "PACKETSTORM",
"id": "101615"
},
{
"db": "PACKETSTORM",
"id": "102622"
},
{
"db": "PACKETSTORM",
"id": "129551"
},
{
"db": "PACKETSTORM",
"id": "102628"
},
{
"db": "PACKETSTORM",
"id": "102620"
},
{
"db": "PACKETSTORM",
"id": "99616"
},
{
"db": "PACKETSTORM",
"id": "110262"
},
{
"db": "CNNVD",
"id": "CNNVD-201103-298"
},
{
"db": "NVD",
"id": "CVE-2011-0188"
}
]
},
"id": "VAR-201103-0287",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-48133"
}
],
"trust": 0.01
},
"last_update_date": "2024-09-19T20:45:02.553000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "HT4581",
"trust": 0.8,
"url": "http://support.apple.com/kb/HT4581"
},
{
"title": "HT4581",
"trust": 0.8,
"url": "http://support.apple.com/kb/HT4581?viewlocale=ja_JP"
},
{
"title": "ruby-1.8.5-19.1.0.1.AXS3",
"trust": 0.8,
"url": "https://tsn.miraclelinux.com/tsn_local/index.php?m=errata\u0026a=detail\u0026eid=1463"
},
{
"title": "2225",
"trust": 0.8,
"url": "https://www.miraclelinux.com/support/index.php?q=node/99\u0026errata_id=2225"
},
{
"title": "RHSA-2011:0910",
"trust": 0.8,
"url": "https://rhn.redhat.com/errata/RHSA-2011-0910.html"
},
{
"title": "Ruby 1.9.2-p136\u30ea\u30ea\u30fc\u30b9",
"trust": 0.8,
"url": "http://www.ruby-lang.org/ja/news/2010/12/25/ruby-1-9-2-p136-is-released"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-001413"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-189",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-48133"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001413"
},
{
"db": "NVD",
"id": "CVE-2011-0188"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.9,
"url": "http://www.securitytracker.com/id?1025236"
},
{
"trust": 1.8,
"url": "http://support.apple.com/kb/ht4581"
},
{
"trust": 1.7,
"url": "http://lists.apple.com/archives/security-announce/2011/mar/msg00006.html"
},
{
"trust": 1.7,
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=682332"
},
{
"trust": 1.6,
"url": "http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/trunk/ext/bigdecimal/bigdecimal.c?r1=29364\u0026r2=30993"
},
{
"trust": 1.1,
"url": "http://www.mandriva.com/security/advisories?name=mdvsa-2011:097"
},
{
"trust": 1.1,
"url": "http://www.mandriva.com/security/advisories?name=mdvsa-2011:098"
},
{
"trust": 1.1,
"url": "http://www.redhat.com/support/errata/rhsa-2011-0908.html"
},
{
"trust": 1.1,
"url": "http://www.redhat.com/support/errata/rhsa-2011-0909.html"
},
{
"trust": 1.1,
"url": "http://www.redhat.com/support/errata/rhsa-2011-0910.html"
},
{
"trust": 1.0,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-0188"
},
{
"trust": 0.8,
"url": "http://jvn.jp/cert/jvnvu636925"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-0188"
},
{
"trust": 0.8,
"url": "http://secunia.com/advisories/44638"
},
{
"trust": 0.8,
"url": "http://www.securityfocus.com/bid/46966"
},
{
"trust": 0.7,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-0188"
},
{
"trust": 0.7,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-1005"
},
{
"trust": 0.6,
"url": "http://secunia.com/advisories/43814"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/16613"
},
{
"trust": 0.6,
"url": "http://www.nsfocus.net/vulndb/16871"
},
{
"trust": 0.5,
"url": "https://nvd.nist.gov/vuln/detail/cve-2010-0541"
},
{
"trust": 0.5,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-1004"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/kb/docs/doc-11259"
},
{
"trust": 0.3,
"url": "https://www.redhat.com/security/data/cve/cve-2011-1005.html"
},
{
"trust": 0.3,
"url": "https://www.redhat.com/security/data/cve/cve-2011-0188.html"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/team/contact/"
},
{
"trust": 0.3,
"url": "http://www.ruby-lang.org/en/news/2011/02/18/exception-methods-can-bypass-safe/"
},
{
"trust": 0.3,
"url": "https://www.redhat.com/mailman/listinfo/rhsa-announce"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"trust": 0.3,
"url": "https://access.redhat.com/security/team/key/#package"
},
{
"trust": 0.3,
"url": "http://bugzilla.redhat.com/):"
},
{
"trust": 0.2,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-0541"
},
{
"trust": 0.2,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-1005"
},
{
"trust": 0.2,
"url": "http://www.mandriva.com/security/"
},
{
"trust": 0.2,
"url": "http://secunia.com/"
},
{
"trust": 0.2,
"url": "http://www.mandriva.com/security/advisories"
},
{
"trust": 0.2,
"url": "http://lists.grok.org.uk/full-disclosure-charter.html"
},
{
"trust": 0.2,
"url": "https://www.redhat.com/security/data/cve/cve-2010-0541.html"
},
{
"trust": 0.2,
"url": "http://www.ruby-lang.org/en/news/2011/02/18/fileutils-is-vulnerable-to-symlink-race-attacks/"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2009-4492"
},
{
"trust": 0.2,
"url": "https://www.redhat.com/security/data/cve/cve-2009-4492.html"
},
{
"trust": 0.2,
"url": "https://www.redhat.com/security/data/cve/cve-2011-1004.html"
},
{
"trust": 0.2,
"url": "http://www.ruby-lang.org/en/news/2010/01/10/webrick-escape-sequence-injection/"
},
{
"trust": 0.2,
"url": "http://www.ruby-lang.org/en/news/2010/08/16/xss-in-webrick-cve-2010-0541/"
},
{
"trust": 0.2,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-4815"
},
{
"trust": 0.1,
"url": "http://svn.ruby-lang.org/cgi-bin/viewvc.cgi/trunk/ext/bigdecimal/bigdecimal.c?r1=29364\u0026amp;r2=30993"
},
{
"trust": 0.1,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-1004"
},
{
"trust": 0.1,
"url": "http://store.mandriva.com/product_info.php?cpath=149\u0026amp;products_id=490"
},
{
"trust": 0.1,
"url": "https://rhn.redhat.com/errata/rhsa-2011-0909.html"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-4815"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-5371"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-1005"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-0269"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-1821"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-8080"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-8080"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-0188"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-0269"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-5371"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-4164"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2014-8090"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2011-1004"
},
{
"trust": 0.1,
"url": "http://creativecommons.org/licenses/by-sa/2.5"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2013-4164"
},
{
"trust": 0.1,
"url": "http://security.gentoo.org/"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2012-4481"
},
{
"trust": 0.1,
"url": "http://security.gentoo.org/glsa/glsa-201412-27.xml"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2014-8090"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2013-1821"
},
{
"trust": 0.1,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2012-4481"
},
{
"trust": 0.1,
"url": "https://bugs.gentoo.org."
},
{
"trust": 0.1,
"url": "https://rhn.redhat.com/errata/rhsa-2011-0910.html"
},
{
"trust": 0.1,
"url": "https://rhn.redhat.com/errata/rhsa-2011-0908.html"
},
{
"trust": 0.1,
"url": "http://secunia.com/products/corporate/evm/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
},
{
"trust": 0.1,
"url": "http://secunia.com/company/events/mms_2011/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/43814/"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/43814/#comments"
},
{
"trust": 0.1,
"url": "http://secunia.com/vulnerability_scanning/personal/"
},
{
"trust": 0.1,
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=898"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=43814"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/ruby1.8/1.8.7.302-2ubuntu0.1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/ruby1.8/1.8.7.299-2ubuntu0.1"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-2705"
},
{
"trust": 0.1,
"url": "http://www.ubuntu.com/usn/usn-1377-1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/ruby1.8/1.8.7.249-2ubuntu0.1"
},
{
"trust": 0.1,
"url": "https://launchpad.net/ubuntu/+source/ruby1.8/1.8.7.352-2ubuntu0.1"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov/vuln/detail/cve-2011-2686"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-48133"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001413"
},
{
"db": "PACKETSTORM",
"id": "101616"
},
{
"db": "PACKETSTORM",
"id": "101615"
},
{
"db": "PACKETSTORM",
"id": "102622"
},
{
"db": "PACKETSTORM",
"id": "129551"
},
{
"db": "PACKETSTORM",
"id": "102628"
},
{
"db": "PACKETSTORM",
"id": "102620"
},
{
"db": "PACKETSTORM",
"id": "99616"
},
{
"db": "PACKETSTORM",
"id": "110262"
},
{
"db": "CNNVD",
"id": "CNNVD-201103-298"
},
{
"db": "NVD",
"id": "CVE-2011-0188"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-48133"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-001413"
},
{
"db": "PACKETSTORM",
"id": "101616"
},
{
"db": "PACKETSTORM",
"id": "101615"
},
{
"db": "PACKETSTORM",
"id": "102622"
},
{
"db": "PACKETSTORM",
"id": "129551"
},
{
"db": "PACKETSTORM",
"id": "102628"
},
{
"db": "PACKETSTORM",
"id": "102620"
},
{
"db": "PACKETSTORM",
"id": "99616"
},
{
"db": "PACKETSTORM",
"id": "110262"
},
{
"db": "CNNVD",
"id": "CNNVD-201103-298"
},
{
"db": "NVD",
"id": "CVE-2011-0188"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-03-23T00:00:00",
"db": "VULHUB",
"id": "VHN-48133"
},
{
"date": "2011-04-25T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-001413"
},
{
"date": "2011-05-23T14:35:38",
"db": "PACKETSTORM",
"id": "101616"
},
{
"date": "2011-05-23T14:34:42",
"db": "PACKETSTORM",
"id": "101615"
},
{
"date": "2011-06-28T19:16:10",
"db": "PACKETSTORM",
"id": "102622"
},
{
"date": "2014-12-15T19:58:46",
"db": "PACKETSTORM",
"id": "129551"
},
{
"date": "2011-06-28T19:32:00",
"db": "PACKETSTORM",
"id": "102628"
},
{
"date": "2011-06-28T19:11:19",
"db": "PACKETSTORM",
"id": "102620"
},
{
"date": "2011-03-22T09:25:41",
"db": "PACKETSTORM",
"id": "99616"
},
{
"date": "2012-02-28T07:00:01",
"db": "PACKETSTORM",
"id": "110262"
},
{
"date": "2011-03-24T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201103-298"
},
{
"date": "2011-03-23T02:00:06.110000",
"db": "NVD",
"id": "CVE-2011-0188"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-08-24T00:00:00",
"db": "VULHUB",
"id": "VHN-48133"
},
{
"date": "2011-07-28T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-001413"
},
{
"date": "2021-07-12T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201103-298"
},
{
"date": "2011-08-24T03:15:07.243000",
"db": "NVD",
"id": "CVE-2011-0188"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "PACKETSTORM",
"id": "101616"
},
{
"db": "PACKETSTORM",
"id": "102620"
},
{
"db": "PACKETSTORM",
"id": "110262"
},
{
"db": "CNNVD",
"id": "CNNVD-201103-298"
}
],
"trust": 0.9
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Ruby of BigDecimal In class VpMemAlloc Vulnerability in arbitrary code execution in function",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-001413"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "other",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201103-298"
}
],
"trust": 0.6
}
}
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.