Sha256: 668f04c51eb21f011374807e5e991dc5449ddf0627a08af10d2ba37cd64b909a
Contents?: true
Size: 1.96 KB
Versions: 8
Compression:
Stored size: 1.96 KB
Contents
require 'spec_helper'
describe "The CVE-2013-0256 vulnerability" do
before(:all) do
@check = Dawn::Kb::CVE_2013_0256.new
# @check.debug = true
end
it "fires when vulnerable ruby (1.9.3-p382) and rdoc version (2.3.0) has been found" do
@check.options={:detected_ruby=>{:engine=>"ruby", :version=>"1.9.3", :patchlevel=>"381"}, :dependencies=>[{:name=>"rdoc", :version=>'2.3.0'}, :root_dir=>"."]}
expect(@check.vuln?).to eq(true)
end
it "fires when vulnerable ruby (1.9.2-p342) and rdoc version (2.3.0) has been found" do
@check.options={:detected_ruby=>{:engine=>"ruby", :version=>"1.9.2", :patchlevel=>"342"}, :dependencies=>[{:name=>"rdoc", :version=>'2.3.0'}, :root_dir=>"."]}
expect(@check.vuln?).to eq(true)
end
it "fires when vulnerable ruby (1.9.3-p382) and rdoc version (3.12) has been found" do
@check.options={:detected_ruby=>{:engine=>"ruby", :version=>"1.9.3", :patchlevel=>"381"}, :dependencies=>[{:name=>"rdoc", :version=>'3.12'}, :root_dir=>"."]}
expect(@check.vuln?).to eq(true)
end
it "fires when vulnerable ruby (1.9.2-p342) and rdoc version (3.12) has been found" do
@check.options={:detected_ruby=>{:engine=>"ruby", :version=>"1.9.2", :patchlevel=>"342"}, :dependencies=>[{:name=>"rdoc", :version=>'3.12'}, :root_dir=>"."]}
expect(@check.vuln?).to eq(true)
end
it "doesn't fire when not vulnerable ruby (1.9.3-p383) is found but vulnerable rdoc version (3.12) has been found" do
@check.options={:detected_ruby=>{:engine=>"ruby", :version=>"1.9.3", :patchlevel=>"383"}, :dependencies=>[{:name=>"rdoc", :version=>'3.12'}, :root_dir=>"."]}
expect(@check.vuln?).to eq(false)
end
it "doesn't fire when vulnerable ruby (1.9.3-p382) is found but not vulnerable rdoc version (3.13) has been found" do
@check.options={:detected_ruby=>{:engine=>"ruby", :version=>"1.9.3", :patchlevel=>"322"}, :dependencies=>[{:name=>"rdoc", :version=>'3.13'}, :root_dir=>"."]}
expect(@check.vuln?).to eq(false)
end
end
Version data entries
8 entries across 8 versions & 1 rubygems