Debian: Security Advisory (DSA-2809-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-4073

The CVE-2012-4073 issue affects the Cisco Unified Computing System (UCS) KVM client, where the KVM subsystem fails to verify X.509 certificates from SSL servers. Root cause: improper certificate validation in the KVM client, enabling a man-in-the-middle attacker to intercept a KVM connection and ...

Debian DSA-2738-1 : ruby1.9.1 - several vulnerabilities

Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to denial of service and other security problems. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2013-1821 Ben Murphy discovered that unrestricted enti...

Fedora Update for ruby FEDORA-2013-12663

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2738-1] ruby1.9.1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2738-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 18, 2013 http://www.debian.org/security/faq -...

BELL-CVE-2013-4073 CVE-2013-4073 does not affect BellSoft software

Bulletin has no description...

CVE-2013-4073

Summary (CVE-2013-4073): The OpenSSL hostname verification in Ruby’s SSL client is broken due to improper handling of a ‘\0’ character in the Subject Alternative Name of X.509 certificates, enabling MITM spoofing via certificates issued by legitimate CAs. Affected: Ruby OpenSSL client implementat...

CVE-2013-4073

The OpenSSL::SSL.verifycertificateidentity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows...

Debian Security Advisory DSA 2738-1 (ruby1.9.1 - several vulnerabilities)

Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to denial of service and other security problems. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-1821 Ben Murphy discovered that unrestricted entity...

DSA-2738-1 ruby1.9.1 - several

Bulletin has no description...

Debian: Security Advisory (DSA-2738-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for ruby CESA-2013:1090 centos5

Check for the Version of ruby OpenVAS Vulnerability Test CentOS Update for ruby CESA-2013:1090 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

SuSE 11.2 / 11.3 Security Update : ruby (SAT Patch Numbers 8026 / 8027)

Ruby failed to check hostnames correctly when setting up a SSL client connection. CVE-2013-4073 was assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself i...

SuSE 10 Security Update : ruby (ZYPP Patch Number 8639)

Ruby failed to check hostnames correctly when setting up a SSL client connection. CVE-2013-4073 was assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Mandriva Linux Security Advisory : ruby (MDVSA-2013:201)

A vulnerability has been discovered and corrected in ruby : A flaw was found in Ruby's SSL client's hostname identity check when handling certificates that contain hostnames with NULL bytes. An attacker could potentially exploit this flaw to conduct man-in-the-middle attacks to spoof SSL servers...

Moderate: Red Hat Security Advisory: ruby193-ruby security update

Updated ruby193-ruby packages that fix one security issue are now available for Red Hat OpenStack 3.0 Grizzly. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Oracle Linux 5 / 6 : ruby (ELSA-2013-1090)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1090 advisory. - Fix regression introduced by CVE-2013-4073 https://bugs.ruby-lang.org/issues/8575...

Scientific Linux Security Update : ruby on SL5.x, SL6.x i386/srpm/x86_64 (20130717)

A flaw was found in Ruby's SSL client's hostname identity check when handling certificates that contain hostnames with NULL bytes. An attacker could potentially exploit this flaw to conduct man-in-the-middle attacks to spoof SSL servers. Note that to exploit this issue, an attacker would need to...

Fedora 17 : ruby-1.9.3.448-31.fc17 (2013-12062)

A vulnerability was found in Ruby's SSL client that could allow man-in-the-middle attackers to spoof SSL servers via valid certificate issued by a trusted certification authority. This vulnerability has been assigned the CVE identifier CVE-2013-4073. This new update should solve this issue. Note...

Oracle Linux 5 / 6 : openswan (ELSA-2011-1422)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1422 advisory. 2.6.32-4.4 Resolves: 748969 CVE-2011-4073 updated patch by upstream 2.6.32-4.3 Resolves: 748969 CVE-2011-4073 Tenable has extracted the preceding descriptio...