Test ID:	1.3.6.1.4.1.25623.1.0.902559
Category:	General
Title:	Ruby Random Number Values Information Disclosure Vulnerability
Summary:	This host is installed with Ruby and is prone to information; disclosure vulnerability.
Description:	Summary: This host is installed with Ruby and is prone to information disclosure vulnerability. Vulnerability Insight: The flaw exists because ruby does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process. Vulnerability Impact: Successful exploits may allow attackers to predict random number values. Affected Software/OS: Ruby Versions prior to Ruby 1.8.6-p114. Solution: Upgrade to Ruby version 1.8.6-p114 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	BugTraq ID: 49126 Common Vulnerability Exposure (CVE) ID: CVE-2011-3009 http://www.securityfocus.com/bid/49126 http://redmine.ruby-lang.org/issues/show/4338 http://www.openwall.com/lists/oss-security/2011/07/20/1 http://www.redhat.com/support/errata/RHSA-2011-1581.html RedHat Security Advisories: RHSA-2012:0070 http://rhn.redhat.com/errata/RHSA-2012-0070.html XForce ISS Database: ruby-random-number-weak-security(69157) https://exchange.xforce.ibmcloud.com/vulnerabilities/69157
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.