This host is installed with Ruby and is prone to local denial of service vulnerability.

Successful exploits may allow local attackers to cause denial-of-service conditions. Impact Level: Application

Upgrade to Ruby version 1.8.7-p352 or later For updates refer to http://rubyforge.org/frs/?group_id=167

The flaw exists because ruby does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process.

Ruby Versions prior to 1.8.7-p352

• http://redmine.ruby-lang.org/issues/show/4338
• http://www.ruby-lang.org/en/news/2011/07/02/ruby-1-8-7-p352-released/
• http://xforce.iss.net/xforce/xfdb/69032

---

Updated on 2015-03-25