Sha256: fd707ae85155a5f7f9c3197dd6cebab115ff9bb60647642e42218bdb4260b81c
Contents?: true
Size: 1.93 KB
Versions: 19
Compression:
Stored size: 1.93 KB
Contents
module Dawn
module Kb
# Automatically created with rake on 2014-01-09
class CVE_2010_2489_a
include RubyVersionCheck
def initialize
message = "CVE_2010_2489_a: ruby 1.9.2-p429 has problems"
super({
:name=>"CVE_2010_2489_a",
:kind=>Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
})
self.safe_rubies = [
{:engine=>"ruby", :version=>"1.9.2", :patchlevel=>"p430"},
{:engine=>"ruby", :version=>"1.9.1", :patchlevel=>"p999"},
{:engine=>"ruby", :version=>"1.9.0", :patchlevel=>"p999"}
]
end
end
class CVE_2010_2489_b
include OperatingSystemCheck
def initialize
message = "CVE_2010_2489_a: Only on Windows"
super({
:name=>"CVE_2010_2489_ab",
:kind=>Dawn::KnowledgeBase::OS_CHECK,
})
self.safe_os = [
{:family=>"windows", :vendor=>"microsoft", :version=>['none']}
]
end
end
class CVE_2010_2489
include ComboCheck
def initialize
message = "Buffer overflow in Ruby 1.9.x before 1.9.1-p429 on Windows might allow local users to gain privileges via a crafted ARGF.inplace_mode value that is not properly handled when constructing the filenames of the backup files"
super({
:name=>"CVE-2010-2489",
:cvss=>"AV:L/AC:L/Au:N/C:C/I:C/A:C",
:release_date => Date.new(2010, 7, 10),
:cwe=>"119",
:owasp=>"A9",
:applies=>["sinatra", "padrino", "rails"],
:kind=>Dawn::KnowledgeBase::COMBO_CHECK,
:message=>message,
:mitigation=>"Please upgrade your ruby interpreter",
:aux_links=>["http://www.ruby-lang.org/en/news/2010/07/02/ruby-1-9-1-p429-is-released/"],
:checks=>[CVE_2010_2489_a.new, CVE_2010_2489_b.new]
})
end
end
end
end
Version data entries
19 entries across 19 versions & 1 rubygems