Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-2726. Reason: This candidate is a duplicate of CVE-2008-2726. Notes: All CVE users should reference CVE-2008-2726 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2008-2728

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-2726. Reason: This candidate is a duplicate of CVE-2008-2726. Notes: All CVE users should reference CVE-2008-2726 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

openSUSE 10 Security Update : ruby (ruby-5483)

This update of ruby fixes : - a possible information leakage CVE-2008-1145 - a directory traversal bug CVE-2008-1891 in WEBrick - various memory corruptions and integer overflows in array and string handling CVE-2008-2662, CVE-2008-2663, CVE-2008-2664, CVE-2008-2725, CVE-2008-2726, CVE-2008-2727,...

SuSE 10 Security Update : Ruby (ZYPP Patch Number 5484)

This update of ruby fixes : - a possible information leakage. CVE-2008-1145 - a directory traversal bug CVE-2008-1891 in WEBrick - various memory corruptions and integer overflows in array and string handling. CVE-2008-2662 / CVE-2008-2663 / CVE-2008-2664 / CVE-2008-2725 / CVE-2008-2726 /...

Debian Security Advisory DSA 1618-1 (ruby1.9)

The remote host is missing an update to ruby1.9 announced via advisory DSA 1618-1. OpenVAS Vulnerability Test $Id: deb16181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1618-1 ruby1.9 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1612-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1612-1 (ruby1.8)

The remote host is missing an update to ruby1.8 announced via advisory DSA 1612-1. OpenVAS Vulnerability Test $Id: deb16121.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1612-1 ruby1.8 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1618-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-1618-1 : ruby1.9 - several vulnerabilities

Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-2662 Drew Yao discovered that multiple...

DSA-1618-1 ruby1.9 - several vulnerabilities

Bulletin has no description...

Debian DSA-1612-1 : ruby1.8 - several vulnerabilities

Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-2662 Drew Yao discovered that multiple...

DSA-1612-1 ruby1.8 - several vulnerabilities

Bulletin has no description...

RHEL 4 / 5 : ruby (RHSA-2008:0561)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0561 advisory. Ruby is an interpreted scripting language for quick and easy object-oriented programming. Multiple integer overflows leading to a heap...

RHEL 2.1 / 3 : ruby (RHSA-2008:0562)

Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting language for quick and easy object-oriented...

irb, ruby security update

CentOS Errata and Security Advisory CESA-2008:0561 Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting...

irb, ruby security update

CentOS Errata and Security Advisory CESA-2008:0562 Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting...

ruby security update

1.8.5-5.el52.3 - CVE-2008-2376: Integer overflow in rbaryfill. 1.8.5-5.el52.1 - security fixes. 451928 - CVE-2008-2662: Integer overflow in rbstrbufappend. - CVE-2008-2663: Integer overflow in rbarystore. - CVE-2008-2664: Unsafe use of alloca in rbstrformat. - CVE-2008-2725: Integer overflow in...

Fedora 9 : ruby-1.8.6.230-4.fc9 (2008-6033)

Tue Jul 1 2008 Akira TAGOH - 1.8.6.230-4 - Backported from upstream SVN to fix a segfault issue with Arrayfill. - Mon Jun 30 2008 Akira TAGOH - 1.8.6.230-3 - Backported from upstream SVN to fix a segfault issue. 452825 - Backported from upstream SVN to fix an integer overflow in rbaryfill. - Wed...

Slackware 11.0 / 12.0 / 12.1 / current : ruby (SSA:2008-179-01)

New ruby packages are available for Slackware 11.0, 12.0, 12.1, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-179-01. The text itself is copyrigh...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : ruby1.8 vulnerabilities (USN-621-1)

Drew Yao discovered several vulnerabilities in Ruby which lead to integer overflows. If a user or automated system were tricked into running a malicious script, an attacker could cause a denial of service or execute arbitrary code with the privileges of the user invoking the program. CVE-2008-266...