An attacker could bypass the 'safe level' checks (CVE-2006-3694).

A number of flaws were discovered in the safe-level restrictions in the Ruby language. Because of these flaws, it would be possible for an attacker to create a carefully crafted malicious script that could allow them to bypass certain safe-level restrictions.

Updated packages have been patched to correct this issue.

更新后的 ruby 程序包修复了若干安全问题，现在可用。

Red Hat 安全响应团队将此更新评级为具有中等安全影响。

Ruby 是一种直译式脚本语言，用于面向对象的编程。

Ruby 用户应升级这些更新后的程序包，其中包含向后移植的修补程序，因此不易受这些问题的影响。


来自 Red Hat 安全公告 2006:0604：

在 Ruby 安全级限制中发现许多缺陷。远程攻击者可创建精心构建的恶意脚本，从而导致绕过某些安全级限制。(CVE-2006-3694)


来自 Red Hat 安全公告 2006:0729：

在 Ruby 的 CGI 模块处理某些 multipart/form-data MIME 数据的方式中发现一个缺陷。如果远程攻击者发送特别构建的 multipart-form-data 请求，可能导致 ruby CGI 脚本进入无限循环，从而造成拒绝服务。(CVE-2006-5467)

セキュリティの問題を修正する更新済みの ruby パッケージが、現在利用可能です。

Red Hat セキュリティレスポンスチームは、この更新は重要度中のセキュリティ影響があると評価しています。

Ruby は、オブジェクト志向プログラミング用のインタープリター型スクリプト言語です。

Ruby のユーザーは、これらの問題に対する脆弱性がない、バックポートされたパッチが含まれるこれらの更新済みパッケージにアップグレードする必要があります。


Red Hat セキュリティアドバイザリ 2006:0604 から：

Ruby のセーフレベルの制限に多数の欠陥が見つかりました。攻撃者が、注意深く細工された悪意あるスクリプトを作成し、特定のセーフレベルの制限をバイパスする可能性があります。(CVE-2006-3694)


Red Hat セキュリティアドバイザリ 2006:0729 から：

Ruby の CGI モジュールが特定の multipart/form-data MIME データを処理する方法に欠陥が見つかりました。リモートの攻撃者が特別に細工された multipart-form-data リクエストを送信すると、Ruby CGI スクリプトが無限ループに入り、サービス拒否が発生する可能性があります。(CVE-2006-5467)

Updated ruby packages that fix security issues are now available. 

This update has been rated as having moderate security impact by the Red Hat Security Response Team. 

Ruby is an interpreted scripting language for object-oriented programming. 

Users of Ruby should upgrade to these updated packages which contain backported patches and are not vulnerable to these issues. 


From Red Hat Security Advisory 2006:0604 :

A number of flaws were found in the safe-level restrictions in Ruby.  It was possible for an attacker to create a carefully crafted malicious script that can allow the bypass of certain safe-level restrictions. (CVE-2006-3694)


From Red Hat Security Advisory 2006:0729 :

A flaw was discovered in the way Ruby's CGI module handles certain multipart/form-data MIME data.  If a remote attacker sends a specially crafted multipart-form-data request, it is possible to cause the ruby CGI script to enter an infinite loop, causing a denial of service. (CVE-2006-5467)

It was discovered that the interpreter for the Ruby language does not properly maintain 'safe levels' for aliasing, directory accesses and regular expressions, which might lead to a bypass of security restrictions.

現已提供更新版 ruby 套件，可修正數個安全性問題。

Red Hat 安全性回應團隊已將此更新評等為具有中等安全性影響。

Ruby 是一種經過解譯的指令碼語言，適用於物件導向的程式設計。

Ruby 使用者應升級至這些包含反向移植修補程式的更新版套件，從而不再受這些問題影響。


來自 Red Hat 安全性公告 2006:0604：

在 Ruby 的安全等級限制中發現一些瑕疵。攻擊者可能會建立特製的惡意指令碼，這可能會允許繞過某些安全等級限制。(CVE-2006-3694)


來自 Red Hat 安全性公告 2006:0729：

在 Ruby CGI 模組用於處理特定 multipart/form-data MIME 資料的方式中，發現一個瑕疵。如果遠端攻擊者傳送特製的 multipart-form-data 要求，可能會使 Ruby CGI 指令碼進入無限迴圈，從而造成拒絕服務。(CVE-2006-5467)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2006:0604 advisory.

  - security flaw (CVE-2006-3694)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Secunia reports :

Two vulnerabilities have been reported in Ruby, which can be exploited by malicious people to bypass certain security restrictions.

- An error in the handling of the 'alias' functionality can be exploited to bypass the safe level protection and replace methods called in the trusted level.

- An error caused due to directory operations not being properly checked can be exploited to bypass the safe level protection and close untainted directory streams.

The alias function, certain directory operations, and regular expressions did not correctly implement safe levels. Depending on the application these flaws might allow attackers to bypass safe level restrictions and perform unintended operations.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An attacker could bypass the 'safe level' checks. (CVE-2006-3694)

Updated ruby packages that fix security issues are now available.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Ruby is an interpreted scripting language for object-oriented programming.

A number of flaws were found in the safe-level restrictions in Ruby.
It was possible for an attacker to create a carefully crafted malicious script that can allow the bypass of certain safe-level restrictions. (CVE-2006-3694)

Users of Ruby should update to these erratum packages, which contain a backported patch and are not vulnerable to this issue.

Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to the bypass of security restrictions or denial of service. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2006-1931     It was discovered that the use of blocking sockets can     lead to denial of service.

  - CVE-2006-3964     It was discovered that Ruby does not properly maintain     'safe levels' for aliasing, directory accesses and     regular expressions, which might lead to a bypass of     security restrictions.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
27421	openSUSE 10 Security Update : ruby (ruby-1948)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	medium
23884	Mandrake Linux Security Advisory : ruby (MDKSA-2006:134)	Nessus	Mandriva Local Security Checks	2006/12/16	2021/1/6	medium
67399	Oracle Linux 3 / 4：ruby (ELSA-2006-0604 / ELSA-2006-0729)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium
67399	Oracle Linux 3/4：ruby（ELSA-2006-0604/ELSA-2006-0729）	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium
67399	Oracle Linux 3 / 4 : ruby (ELSA-2006-0604 / ELSA-2006-0729)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium
22681	Debian DSA-1139-1 : ruby1.6 - missing privilege checks	Nessus	Debian Local Security Checks	2006/10/14	2021/1/4	medium
67399	Oracle Linux 3 / 4 : ruby (ELSA-2006-0604 / ELSA-2006-0729)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	medium
22113	RHEL 4 : ruby (RHSA-2006:0604)	Nessus	Red Hat Local Security Checks	2006/7/28	2024/4/21	critical
22139	FreeBSD : ruby -- multiple vulnerabilities (76562594-1f19-11db-b7d4-0008743bf21a)	Nessus	FreeBSD Local Security Checks	2006/8/4	2021/1/6	medium
27903	Ubuntu 5.04 / 5.10 / 6.06 LTS : ruby1.8 vulnerability (USN-325-1)	Nessus	Ubuntu Local Security Checks	2007/11/10	2021/1/19	medium
29570	SuSE 10 Security Update : ruby (ZYPP Patch Number 1946)	Nessus	SuSE Local Security Checks	2007/12/13	2021/1/14	medium
22136	CentOS 3 / 4 : ruby (CESA-2006:0604)	Nessus	CentOS Local Security Checks	2006/8/4	2021/1/4	medium
22699	Debian DSA-1157-1 : ruby1.8 - several vulnerabilities	Nessus	Debian Local Security Checks	2006/10/14	2021/1/4	medium

検出

プラグインの検索

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium

medium

medium

medium