Red Hat Desktop, Red Hat Enterprise Linux

ソフト名：Red Hat Desktop 4.x, Red Hat Enterprise Linux AS 4/ES 4/WS 4/5 (Server)/Desktop 5/Workstation 5/Desktop 6/HPC Node 6/Server 6/Workstation 6 (Ruby 1.8.x/1.9.x)

回避策：RHSA-2011:0908-1, RHSA-2011:0909-1, RHSA-2011:0910-1にて対応

脆弱性：セキュリティ制限の回避, XSS, データ操作, 権限の昇格, DoS攻撃, システムアクセス, HTTPサーバエラー, 不正HTMLの実行, スクリプトコード実行, 整数切り捨てエラー, メモリ破壊, シムリンク攻撃, ディレクトリ操作, ファイル操作

ソース：http://www.redhat.com/rhel/

http://www.redhat.com/rhel/desktop/

http://www.redhat.com/rhel/server/

http://rhn.redhat.com/errata/RHSA-2011-0908.html

https://rhn.redhat.com/errata/RHSA-2011-0909.html

https://rhn.redhat.com/errata/RHSA-2011-0910.html

http://secunia.com/advisories/37949/

http://secunia.com/advisories/41003/

http://secunia.com/advisories/43420/

http://secunia.com/advisories/43434/

http://secunia.com/advisories/44638/

http://secunia.com/advisories/45096/

http://secunia.com/advisories/45109/

http://secunia.com/advisories/45110/

http://dvw-j.blogspot.com/2011/02/ruby.html

http://dvw-j.blogspot.com/2011/02/ruby_23.html

http://dvw-j.blogspot.com/2011/05/ruby.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4492

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0541

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0188

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1004

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1005

CVE：CVE-2009-4492, CVE-2010-0541, CVE-2011-0188, CVE-2011-1004, CVE-2011-1005

危険性：Medium Risk