|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
|
Description |
Ruby contains a flaw that may allow a malicious user to bypass Safe Level restrictions. The issue is triggered when improper validation of the 'alias' function occurs. It is possible that the flaw may allow malicious code execution resulting in a loss of confidentiality, integrity.
|
|
Classification |
Location:
Local Access Required,
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Confidentiality,
Loss of Integrity
Exploit:
Exploit Unknown
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version 1.8.5 or higher, as it has been reported to fix this vulnerability. A patch is also available from various Linux vendors.
|
|
Products |
|
Ruby
 |
1.8.4 |
1.8.3 |
1.8.2x |
1.8.1 |
1.6 |
1.6.8 |
1.6.7 |
|
|
|
|
|
|
Credit |
Unknown or Incomplete
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
