OpenPKG Security Advisory
OpenPKG-SA-2006.016
Publisher Name: OpenPKG GmbH Publisher Home: http://openpkg.com/ Advisory Id (public): OpenPKG-SA-2006.016 Advisory Type: OpenPKG Security Advisory (SA) Advisory Directory: http://openpkg.com/go/OpenPKG-SA Advisory Document: http://openpkg.com/go/OpenPKG-SA-2006.016 Advisory Published: 2008-10-06 23:06 UTC Issue Id (internal): OpenPKG-SI-20060728.02 Issue First Created: 2006-07-28 Issue Last Modified: 2006-12-07 Issue Revision: 08
Subject Name: Ruby Subject Summary: The Ruby Scripting Language Subject Home: http://www.ruby-lang.org/ Subject Versions: * <= 1.8.4 Vulnerability Id: CVE-2006-3694 Vulnerability Scope: global (not OpenPKG specific) Attack Feasibility: run-time Attack Vector: local system Attack Impact: privilege escalation Description: Multiple unspecified vulnerabilities in the Ruby [1] programming language allow remote attackers to bypass "safe level" checks via unspecified vectors involving the "alias" function, directory operations and regular expressions. References: [1] http://www.ruby-lang.org/
Primary Package Name: ruby Primary Package Home: http://openpkg.org/go/package/ruby Affected Distribution: Affected Branch: Affected Package: OpenPKG Community 2.5-SOLID ruby-1.8.3-2.5.0 OpenPKG Community 2-STABLE ruby-1.8.4-2.20060622 OpenPKG Community CURRENT ruby-1.8.4-20051225 Corrected Distribution: Corrected Branch: Corrected Package: OpenPKG Community 2.5-SOLID ruby-1.8.3-2.5.1 OpenPKG Community 2-STABLE ruby-1.8.4-2.20060728 OpenPKG Community CURRENT ruby-1.8.4-20060728
