This host is installed with Ruby and is prone to buffer overflow vulnerability.

Successful exploitation will allows local attackers to cause buffer overflow and execute arbitrary code on the system or cause the application to crash. Impact Level: Application.

Upgrade to Ruby version 1.9.1-p429 or later, For updates refer to http://rubyforge.org/frs/?group_id=167

The flaw caused by improper bounds checking when handling filenames on Windows systems. It is not properly validating value assigned to the 'ARGF.inplace_mode' variable.

Ruby version 1.9.x before 1.9.1-p429 on Windows.

• http://osvdb.org/66040
• http://secunia.com/advisories/40442
• http://svn.ruby-lang.org/repos/ruby/tags/v1_9_1_429/ChangeLog
• http://xforce.iss.net/xforce/xfdb/60135

---

Updated on 2015-03-25