This host is installed with Ruby and is prone to information disclosure vulnerability.

Successful exploits may allow attackers to predict random number values. Impact Level: Application

Upgrade to Ruby version 1.8.6-p114 or later For updates refer to http://rubyforge.org/frs/?group_id=167

The flaw exists because ruby does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process.

Ruby Versions prior to Ruby 1.8.6-p114

• http://redmine.ruby-lang.org/issues/show/4338
• http://www.openwall.com/lists/oss-security/2011/07/20/1

---

Updated on 2015-03-25