Detections
Analytics
FreeBSD : Ruby -- multiple vulnerabilities (7ed5779c-e4c7-11eb-91d7-08002728f74c)
high Nessus Plugin ID 151778
Language:
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
Ruby news :This release includes security fixes. Please check the topics below for details.
CVE-2021-31810: Trusting FTP PASV responses vulnerability in Net::FTP
CVE-2021-32066: A StartTLS stripping vulnerability in Net::IMAP
CVE-2021-31799: A command injection vulnerability in RDoc
Solution
Update the affected packages.See Also
https://www.ruby-lang.org/en/news/2021/07/07/ruby-2-6-8-released/
https://www.ruby-lang.org/en/news/2021/07/07/ruby-2-7-4-released/
https://www.ruby-lang.org/en/news/2021/07/07/ruby-3-0-2-released/
http://www.nessus.org/u?eeaba14f
http://www.nessus.org/u?71f6add6
Plugin Details
Severity: High
ID: 151778
File Name: freebsd_pkg_7ed5779ce4c711eb91d708002728f74c.nasl
Version: 1.6
Type: local
Family: FreeBSD Local Security Checks
Published: 7/16/2021
Updated: 12/7/2023
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 5.8
Temporal Score: 4.5
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N
CVSS Score Source: CVE-2021-32066
CVSS v3
Risk Factor: High
Base Score: 7.4
Temporal Score: 6.7
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:ruby, p-cpe:/a:freebsd:freebsd:ruby26, cpe:/o:freebsd:freebsd, p-cpe:/a:freebsd:freebsd:ruby30
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 7/14/2021
Vulnerability Publication Date: 7/7/2021