Test Kennung:	1.3.6.1.4.1.25623.1.0.801375
Kategorie:	Buffer overflow
Titel:	Ruby 'ARGF.inplace_mode' Buffer Overflow Vulnerability
Zusammenfassung:	This host is installed with Ruby and is prone to buffer overflow; vulnerability.
Beschreibung:	Summary: This host is installed with Ruby and is prone to buffer overflow vulnerability. Vulnerability Insight: The flaw caused by improper bounds checking when handling filenames on Windows systems. It is not properly validating value assigned to the 'ARGF.inplace_mode' variable. Vulnerability Impact: Successful exploitation will allow local attackers to cause buffer overflow and execute arbitrary code on the system or cause the application to crash. Affected Software/OS: Ruby version 1.9.x before 1.9.1-p429 on Windows. Solution: Upgrade to Ruby version 1.9.1-p429 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	BugTraq ID: 41321 Common Vulnerability Exposure (CVE) ID: CVE-2010-2489 http://www.securityfocus.com/bid/41321 http://www.openwall.com/lists/oss-security/2010/07/02/1 http://www.openwall.com/lists/oss-security/2010/07/02/10 http://osdir.com/ml/ruby-talk/2010-07/msg00095.html http://www.osvdb.org/66040 http://secunia.com/advisories/40442 XForce ISS Database: ruby-argfinplacemode-bo(60135) https://exchange.xforce.ibmcloud.com/vulnerabilities/60135
Copyright	Copyright (C) 2010 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.