This host is installed with Ruby and is prone to denial-of-service vulnerability.

Successful exploitation will allow attackers to cause a denial of service (crash) condition. Impact Level: Application

Upgrade to Ruby 1.9.3-p550 or 2.0.0-p594 or 2.1.4 later. For updates refer http://www.ruby-lang.org

Flaw exists due to an incorrectly configured XML parser accepting XML external entities from an untrusted source

Ruby versions Ruby 1.9.x before 1.9.3-p550, 2.0.x before 2.0.0-p594, and 2.1.x before 2.1.4 on Windows.

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://secunia.com/advisories/61607
• http://www.osvdb.org/113747
• https://www.ruby-lang.org/en/news/2014/10/27/rexml-dos-cve-2014-8080

---

Updated on 2015-03-25