CVE-2009-1904

Synopsis Moderate: ruby security update Type/Severity Security Advisory: Moderate Topic Updated ruby packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 4 and 5This update has been rated as having moderate security impact by the RedHat Security Response Team D ...

It was discovered that Ruby did not properly validate certificates An attacker could exploit this and present invalid or revoked X509 certificates (CVE-2009-0642) ...

Emmanouel Kellinis discovered that Ruby did not properly handle certain string operations An attacker could exploit this issue and possibly execute arbitrary code with application privileges (CVE-2009-4124) ...

Several vulnerabilities have been discovered in Ruby The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-0642 The return value from the OCSP_basic_verify function was not checked properly, allowing continued use of a revoked certificate CVE-2009-1904 An issue in parsing BigDecimal numbers can result ...