Sha256: 8b3908573872e3423477468d7d650086de42261c03f69fa9a221ae263ff4856e

Contents?: true

Size: 961 Bytes

Versions: 18

Compression:

Stored size: 961 Bytes

Contents

require 'spec_helper'

describe "The CVE-2013-6416 vulnerability" do
  before(:all) do 
    @check = Codesake::Dawn::Kb::CVE_2013_6416.new
    # @check.debug = true
  end
  it "is detected if vulnerable version of rails rubygem is detected" do
    @check.dependencies=[{:name=>"rails", :version=>'4.0.1'}]
    @check.vuln?.should   be_true
  end
  it "is ignored if rails version is 3.2.x" do 
    @check.dependencies=[{:name=>"rails", :version=>'3.2.16'}]
    @check.vuln?.should   be_false
  end

  it "is ignored if rails version is 3.1.x" do 
    @check.dependencies=[{:name=>"rails", :version=>'3.1.16'}]
    @check.vuln?.should   be_false
  end
  it "is ignored if rails version is 3.0.x" do 
    @check.dependencies=[{:name=>"rails", :version=>'3.0.16'}]
    @check.vuln?.should   be_false
  end
  it "is ignored if rails version is 2.3.x" do 
    @check.dependencies=[{:name=>"rails", :version=>'2.3.16'}]
    @check.vuln?.should   be_false
  end


end

Version data entries

18 entries across 18 versions & 2 rubygems

Version Path
dawnscanner-1.2.99 spec/lib/kb/cve_2013_6416_spec.rb
codesake-dawn-1.2.99 spec/lib/kb/cve_2013_6416_spec.rb
codesake-dawn-1.2.0 spec/lib/kb/cve_2013_6416_spec.rb
codesake-dawn-1.1.3 spec/lib/kb/cve_2013_6416_spec.rb
codesake-dawn-1.1.2 spec/lib/kb/cve_2013_6416_spec.rb
codesake-dawn-1.1.1 spec/lib/kb/cve_2013_6416_spec.rb
codesake-dawn-1.1.0 spec/lib/kb/cve_2013_6416_spec.rb
codesake-dawn-1.1.0.rc2 spec/lib/kb/cve_2013_6416_spec.rb
codesake-dawn-1.1.0.rc1 spec/lib/kb/cve_2013_6416_spec.rb
codesake-dawn-1.0.6 spec/lib/kb/codesake_cve_2013_6416_spec.rb
codesake-dawn-1.0.5 spec/lib/kb/codesake_cve_2013_6416_spec.rb
codesake-dawn-1.0.4 spec/lib/kb/codesake_cve_2013_6416_spec.rb
codesake-dawn-1.0.3 spec/lib/kb/codesake_cve_2013_6416_spec.rb
codesake-dawn-1.0.2 spec/lib/kb/codesake_cve_2013_6416_spec.rb
codesake-dawn-1.0.1 spec/lib/kb/codesake_cve_2013_6416_spec.rb
codesake-dawn-1.0.0 spec/lib/kb/codesake_cve_2013_6416_spec.rb
codesake-dawn-1.0.0.rc2 spec/lib/kb/codesake_cve_2013_6416_spec.rb
codesake-dawn-1.0.0.rc1 spec/lib/kb/codesake_cve_2013_6416_spec.rb