Fedora Update for rubygem-actionpack FEDORA-2012-8912

Check for the Version of rubygem-actionpack OpenVAS Vulnerability Test Fedora Update for rubygem-actionpack FEDORA-2012-8912 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for rubygem-actionpack FEDORA-2012-3355

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for rubygem-activesupport FEDORA-2011-11579

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for rubygem-actionpack FEDORA-2011-11572

Check for the Version of rubygem-actionpack OpenVAS Vulnerability Test Fedora Update for rubygem-actionpack FEDORA-2011-11572 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Fedora Update for rubygem-actionpack FEDORA-2011-8580

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 15 : rubygem-actionpack-3.0.5-3.fc15 (2011-8580)

This update fixes : - Bug 713692 - CVE-2011-2197 rubygem-activesupport: XSS due improper management of safe buffers Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...

Fedora Update for rubygem-activesupport FEDORA-2011-8494

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-2197

CVE-2011-2197 concerns Ruby on Rails XSS protection: the safe-buffer mutation handling in Rails’ XSS prevention can be bypassed, enabling remote XSS via crafted input. Affected: Rails 2.x before 2.3.12; Rails 3.0.x before 3.0.8; Rails 3.1.x before 3.1.0.rc2. Root cause per advisory: improper muta...

CVE-2011-2197

The cross-site scripting XSS prevention feature in Ruby on Rails 2.x before 2.3.12, 3.0.x before 3.0.8, and 3.1.x before 3.1.0.rc2 does not properly handle mutation of safe buffers, which makes it easier for remote attackers to conduct XSS attacks via crafted strings to an application that uses a...

Fedora 15 : rubygem-activesupport-3.0.5-3.fc15 (2011-8494)

This update fixes : - Bug 713692 - CVE-2011-2197 rubygem-activesupport: XSS due improper management of safe buffers Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format ...

Debian: Security Advisory (DSA-2197-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2197-1 (quagga)

The remote host is missing an update to quagga announced via advisory DSA 2197-1. OpenVAS Vulnerability Test $Id: deb21971.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2197-1 quagga Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2197-1 : quagga - denial of service

It has been discovered that the Quagga routing daemon contains two denial-of-service vulnerabilities in its BGP implementation : - CVE-2010-1674 A crafted Extended Communities attribute triggers a NULL pointer dereference which causes the BGP daemon to crash. The crafted attributes are not...

CVE-2010-2197

rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ; semicolon tilde sequence in a Name tag...

CVE-2010-2197

CVE-2010-2197 affects the Red Hat RPM package manager where RPMs with a crafted spec file trigger a parsing flaw in the Name tag (semicolon-tilde sequence), enabling local privilege escalation or potentially arbitrary code execution via a specially crafted package. The Gentoo GLSA and related adv...

CVE-2010-2197

rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ; semicolon tilde sequence in a Name tag...

CVE-2010-2197

rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ; semicolon tilde sequence in a Name tag...

Gentoo Security Advisory GLSA 200606-24 (wv2)

The remote host is missing updates announced in advisory GLSA 200606-24. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

FreeBSD Ports: wv2

The remote host is missing an update to the system as announced in the referenced advisory. VID b9044cc2-8aa5-11db-bd0d-00123ffe8333 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: wv2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...