Vulnerabilities > CVE-2007-6183 - USE of Externally-Controlled Format String vulnerability in Ruby Gnome2 Ruby Gnome2 0.16.0

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
ruby-gnome2
CWE-134
nessus
NVD
Published: 2007-11-30
Updated: 2018-10-15

Summary

Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter.

Vulnerable Configurations

Part Description Count
Application
Ruby_Gnome2
1

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

  • Format String Injection
    An attacker includes formatting characters in a string input field on the target application. Most applications assume that users will provide static text and may respond unpredictably to the presence of formatting character. For example, in certain functions of the C programming languages such as printf, the formatting character %s will print the contents of a memory location expecting this location to identify a string and the formatting character %n prints the number of DWORD written in the memory. An attacker can use this to read or write to memory locations or files, or simply to manipulate the value of the resulting text in unexpected ways. Reading or writing memory may result in program crashes and writing memory could result in the execution of arbitrary code if the attacker can write to the program stack.
  • String Format Overflow in syslog()
    This attack targets the format string vulnerabilities in the syslog() function. An attacker would typically inject malicious input in the format string parameter of the syslog function. This is a common problem, and many public vulnerabilities and associated exploits have been posted.

Nessus

  • NASL familyFedora Local Security Checks
    NASL idFEDORA_2007-4229.NASL
    descriptionFix CVE-2007-6183, format string vulnerability Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id29277
    published2007-12-11
    reporterThis script is Copyright (C) 2007-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/29277
    titleFedora 7 : ruby-gnome2-0.16.0-18.fc7 (2007-4229)
    code
    #%NASL_MIN_LEVEL 80502
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory 2007-4229.
#

include("compat.inc");

if (description)
{
  script_id(29277);
  script_version ("1.14");
  script_cvs_date("Date: 2019/08/02 13:32:26");

  script_cve_id("CVE-2007-6183");
  script_bugtraq_id(26616);
  script_xref(name:"FEDORA", value:"2007-4229");

  script_name(english:"Fedora 7 : ruby-gnome2-0.16.0-18.fc7 (2007-4229)");
  script_summary(english:"Checks rpm output for the updated packages.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"Fix CVE-2007-6183, format string vulnerability

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.redhat.com/show_bug.cgi?id=402871"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.redhat.com/show_bug.cgi?id=405591"
  );
  # https://lists.fedoraproject.org/pipermail/package-announce/2007-December/005713.html
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?3e9dbca1"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(134);

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-atk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-atk-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gconf2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gdkpixbuf2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-glib2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-glib2-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gnome2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gnome2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gnomecanvas2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gnomeprint2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gnomeprintui2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gnomevfs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gtk2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gtk2-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gtkglext");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gtkhtml2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gtkmozembed");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gtksourceview");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-libart2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-libart2-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-libglade2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-panelapplet2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-pango");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-pango-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-poppler");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-rsvg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-vte");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:7");

  script_set_attribute(attribute:"patch_publication_date", value:"2007/12/06");
  script_set_attribute(attribute:"plugin_publication_date", value:"2007/12/11");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2007-2019 Tenable Network Security, Inc.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 7.x", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);

flag = 0;
if (rpm_check(release:"FC7", reference:"ruby-atk-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-atk-devel-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-gconf2-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-gdkpixbuf2-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-glib2-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-glib2-devel-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-gnome2-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-gnome2-debuginfo-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-gnomecanvas2-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-gnomeprint2-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-gnomeprintui2-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-gnomevfs-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-gtk2-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-gtk2-devel-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-gtkglext-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-gtkhtml2-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-gtkmozembed-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-gtksourceview-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-libart2-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-libart2-devel-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-libglade2-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-panelapplet2-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-pango-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-pango-devel-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-poppler-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-rsvg-0.16.0-18.fc7")) flag++;
if (rpm_check(release:"FC7", reference:"ruby-vte-0.16.0-18.fc7")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ruby-atk / ruby-atk-devel / ruby-gconf2 / ruby-gdkpixbuf2 / etc");
}
  • NASL familyGentoo Local Security Checks
    NASL idGENTOO_GLSA-200712-09.NASL
    descriptionThe remote host is affected by the vulnerability described in GLSA-200712-09 (Ruby-GNOME2: Format string error) Chris Rohlf discovered that the
    last seen2020-06-01
    modified2020-06-02
    plugin id29296
    published2007-12-11
    reporterThis script is Copyright (C) 2007-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/29296
    titleGLSA-200712-09 : Ruby-GNOME2: Format string error
    code
    #%NASL_MIN_LEVEL 80502
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were
# extracted from Gentoo Linux Security Advisory GLSA 200712-09.
#
# The advisory text is Copyright (C) 2001-2015 Gentoo Foundation, Inc.
# and licensed under the Creative Commons - Attribution / Share Alike 
# license. See http://creativecommons.org/licenses/by-sa/3.0/
#

include("compat.inc");

if (description)
{
  script_id(29296);
  script_version("1.14");
  script_cvs_date("Date: 2019/08/02 13:32:44");

  script_cve_id("CVE-2007-6183");
  script_bugtraq_id(26616);
  script_xref(name:"GLSA", value:"200712-09");

  script_name(english:"GLSA-200712-09 : Ruby-GNOME2: Format string error");
  script_summary(english:"Checks for updated package(s) in /var/db/pkg");

  script_set_attribute(
    attribute:"synopsis", 
    value:
"The remote Gentoo host is missing one or more security-related
patches."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"The remote host is affected by the vulnerability described in GLSA-200712-09
(Ruby-GNOME2: Format string error)

    Chris Rohlf discovered that the 'Gtk::MessageDialog.new()' method in
    the file gtk/src/rbgtkmessagedialog.c does not properly sanitize the
    'message' parameter before passing it to the gtk_message_dialog_new()
    function.
  
Impact :

    A remote attacker could send a specially crafted string to an
    application using Ruby-GNOME2, possibly leading to the execution of
    arbitrary code with the privileges of the user running the application.
  
Workaround :

    There is no known workaround at this time."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://security.gentoo.org/glsa/200712-09"
  );
  script_set_attribute(
    attribute:"solution", 
    value:
"All Ruby-GNOME2 users should upgrade to the latest version:
    # emerge --sync
    # emerge --ask --oneshot --verbose '>=dev-ruby/ruby-gtk2-0.16.0-r2'"
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(134);

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:gentoo:linux:ruby-gtk2");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:gentoo:linux");

  script_set_attribute(attribute:"patch_publication_date", value:"2007/12/09");
  script_set_attribute(attribute:"plugin_publication_date", value:"2007/12/11");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2007-2019 Tenable Network Security, Inc.");
  script_family(english:"Gentoo Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Gentoo/release", "Host/Gentoo/qpkg-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("qpkg.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Gentoo/release")) audit(AUDIT_OS_NOT, "Gentoo");
if (!get_kb_item("Host/Gentoo/qpkg-list")) audit(AUDIT_PACKAGE_LIST_MISSING);


flag = 0;

if (qpkg_check(package:"dev-ruby/ruby-gtk2", unaffected:make_list("ge 0.16.0-r2"), vulnerable:make_list("lt 0.16.0-r2"))) flag++;

if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:qpkg_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = qpkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "Ruby-GNOME2");
}
  • NASL familyDebian Local Security Checks
    NASL idDEBIAN_DSA-1431.NASL
    descriptionIt was discovered that ruby-gnome2, the GNOME-related bindings for the Ruby language, didn
    last seen2020-06-01
    modified2020-06-02
    plugin id29339
    published2007-12-12
    reporterThis script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/29339
    titleDebian DSA-1431-1 : ruby-gnome2 - format string
    code
    #%NASL_MIN_LEVEL 80502
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Debian Security Advisory DSA-1431. The text 
# itself is copyright (C) Software in the Public Interest, Inc.
#

include("compat.inc");

if (description)
{
  script_id(29339);
  script_version("1.16");
  script_cvs_date("Date: 2019/08/02 13:32:20");

  script_cve_id("CVE-2007-6183");
  script_xref(name:"DSA", value:"1431");

  script_name(english:"Debian DSA-1431-1 : ruby-gnome2 - format string");
  script_summary(english:"Checks dpkg output for the updated package");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Debian host is missing a security-related update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"It was discovered that ruby-gnome2, the GNOME-related bindings for the
Ruby language, didn't properly sanitize input prior to constructing
dialogs. This could allow the execution of arbitrary code if untrusted
input is displayed within a dialog."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=453689"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://www.debian.org/security/2007/dsa-1431"
  );
  script_set_attribute(
    attribute:"solution", 
    value:
"Upgrade the ruby-gnome2 package.

For the old stable distribution (sarge), this problem has been fixed
in version 0.12.0-2sarge1.

For the stable distribution (etch), this problem has been fixed in
version 0.15.0-1.1etch1."
  );
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_cwe_id(134);

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:ruby-gnome2");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:3.1");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:4.0");

  script_set_attribute(attribute:"patch_publication_date", value:"2007/12/11");
  script_set_attribute(attribute:"plugin_publication_date", value:"2007/12/12");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
  script_family(english:"Debian Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");

  exit(0);
}


include("audit.inc");
include("debian_package.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian");
if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);


flag = 0;
if (deb_check(release:"3.1", prefix:"libart2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libatk1-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libgconf2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libgda2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libgdk-pixbuf2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libglade2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libglib2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libgnome2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libgnomecanvas2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libgnomeprint2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libgnomeprintui2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libgnomevfs2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libgstreamer0.8-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libgtk2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libgtkglext1-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libgtkhtml2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libgtksourceview1-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libpanel-applet2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"libpango1-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"librsvg2-ruby", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"3.1", prefix:"ruby-gnome2", reference:"0.12.0-2sarge1")) flag++;
if (deb_check(release:"4.0", prefix:"libart2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libatk1-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libgconf2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libgda2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libgdk-pixbuf2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libglade2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libglib2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libgnome2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libgnomecanvas2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libgnomeprint2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libgnomeprintui2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libgnomevfs2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libgstreamer0.8-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libgtk-mozembed-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libgtk2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libgtkglext1-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libgtkhtml2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libgtksourceview1-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libpanel-applet2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libpango1-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"librsvg2-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"libvte-ruby", reference:"0.15.0-1.1etch1")) flag++;
if (deb_check(release:"4.0", prefix:"ruby-gnome2", reference:"0.15.0-1.1etch1")) flag++;

if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:deb_report_get());
  else security_warning(0);
  exit(0);
}
else audit(AUDIT_HOST_NOT, "affected");
  • NASL familyMandriva Local Security Checks
    NASL idMANDRIVA_MDVSA-2008-033.NASL
    descriptionA format string vulnerability in Ruby-GNOME 2 0.16.0, and SVN versions before 20071127, allows context-dependent attackers to execute arbitrary code via format string specifiers in the message parameter. The updated packages have been patched to prevent this issue.
    last seen2020-06-01
    modified2020-06-02
    plugin id36963
    published2009-04-23
    reporterThis script is Copyright (C) 2009-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/36963
    titleMandriva Linux Security Advisory : ruby-gnome2 (MDVSA-2008:033)
    code
    #%NASL_MIN_LEVEL 80502

#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Mandriva Linux Security Advisory MDVSA-2008:033. 
# The text itself is copyright (C) Mandriva S.A.
#

include("compat.inc");

if (description)
{
  script_id(36963);
  script_version ("1.13");
  script_cvs_date("Date: 2019/08/02 13:32:50");

  script_cve_id("CVE-2007-6183");
  script_bugtraq_id(26616);
  script_xref(name:"MDVSA", value:"2008:033");

  script_name(english:"Mandriva Linux Security Advisory : ruby-gnome2 (MDVSA-2008:033)");
  script_summary(english:"Checks rpm output for the updated packages");

  script_set_attribute(
    attribute:"synopsis", 
    value:
"The remote Mandriva Linux host is missing one or more security
updates."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"A format string vulnerability in Ruby-GNOME 2 0.16.0, and SVN versions
before 20071127, allows context-dependent attackers to execute
arbitrary code via format string specifiers in the message parameter.

The updated packages have been patched to prevent this issue."
  );
  script_set_attribute(attribute:"solution", value:"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(134);

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-atk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-gconf2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-gdkpixbuf2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-glib2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-gnome2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-gnome2-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-gnomecanvas2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-gnomeprint2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-gnomeprintui2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-gnomevfs2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-gtk2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-gtkglext");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-gtkhtml2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-gtkmozembed");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-gtksourceview");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-libart2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-libglade2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-panelapplet2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-pango");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-poppler");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-rsvg2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:mandriva:linux:ruby-vte");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mandriva:linux:2007.1");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:mandriva:linux:2008.0");

  script_set_attribute(attribute:"patch_publication_date", value:"2008/02/01");
  script_set_attribute(attribute:"plugin_publication_date", value:"2009/04/23");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2009-2019 Tenable Network Security, Inc.");
  script_family(english:"Mandriva Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/Mandrake/release", "Host/Mandrake/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");


if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/Mandrake/release")) audit(AUDIT_OS_NOT, "Mandriva / Mandake Linux");
if (!get_kb_item("Host/Mandrake/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if (cpu !~ "^(amd64|i[3-6]86|x86_64)$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Mandriva / Mandrake Linux", cpu);


flag = 0;
if (rpm_check(release:"MDK2007.1", reference:"ruby-atk-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-gconf2-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-gdkpixbuf2-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-glib2-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-gnome2-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-gnome2-devel-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-gnomecanvas2-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-gnomeprint2-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-gnomeprintui2-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-gnomevfs2-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-gtk2-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-gtkglext-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-gtkhtml2-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-gtkmozembed-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-gtksourceview-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-libart2-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-libglade2-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-panelapplet2-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-pango-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-poppler-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-rsvg2-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2007.1", reference:"ruby-vte-0.16.0-2.1mdv2007.1", yank:"mdv")) flag++;

if (rpm_check(release:"MDK2008.0", reference:"ruby-atk-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-gconf2-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-gdkpixbuf2-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-glib2-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-gnome2-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-gnome2-devel-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-gnomecanvas2-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-gnomeprint2-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-gnomeprintui2-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-gnomevfs2-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-gtk2-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-gtkglext-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-gtkhtml2-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-gtkmozembed-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-gtksourceview-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-libart2-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-libglade2-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-panelapplet2-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-pango-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-poppler-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-rsvg2-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;
if (rpm_check(release:"MDK2008.0", reference:"ruby-vte-0.16.0-3.1mdv2008.0", yank:"mdv")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else audit(AUDIT_HOST_NOT, "affected");
  • NASL familyFedora Local Security Checks
    NASL idFEDORA_2007-4216.NASL
    descriptionFix CVE-2007-6183, format string vulnerability (bugzilla #402871) Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id29276
    published2007-12-11
    reporterThis script is Copyright (C) 2007-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/29276
    titleFedora 8 : ruby-gnome2-0.16.0-18.fc8 (2007-4216)
    code
    #%NASL_MIN_LEVEL 80502
#
# (C) Tenable Network Security, Inc.
#
# The descriptive text and package checks in this plugin were  
# extracted from Fedora Security Advisory 2007-4216.
#

include("compat.inc");

if (description)
{
  script_id(29276);
  script_version ("1.14");
  script_cvs_date("Date: 2019/08/02 13:32:26");

  script_cve_id("CVE-2007-6183");
  script_bugtraq_id(26616);
  script_xref(name:"FEDORA", value:"2007-4216");

  script_name(english:"Fedora 8 : ruby-gnome2-0.16.0-18.fc8 (2007-4216)");
  script_summary(english:"Checks rpm output for the updated packages.");

  script_set_attribute(
    attribute:"synopsis", 
    value:"The remote Fedora host is missing a security update."
  );
  script_set_attribute(
    attribute:"description", 
    value:
"Fix CVE-2007-6183, format string vulnerability (bugzilla #402871)

Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues."
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.redhat.com/show_bug.cgi?id=402871"
  );
  script_set_attribute(
    attribute:"see_also",
    value:"https://bugzilla.redhat.com/show_bug.cgi?id=405601"
  );
  # https://lists.fedoraproject.org/pipermail/package-announce/2007-December/005676.html
  script_set_attribute(
    attribute:"see_also",
    value:"http://www.nessus.org/u?1b9b5b7b"
  );
  script_set_attribute(attribute:"solution", value:"Update the affected packages.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_set_cvss_temporal_vector("CVSS2#E:ND/RL:OF/RC:C");
  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(134);

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-atk");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-atk-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gconf2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gdkpixbuf2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-glib2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-glib2-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gnome2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gnome2-debuginfo");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gnomecanvas2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gnomeprint2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gnomeprintui2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gnomevfs");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gtk2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gtk2-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gtkglext");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gtkhtml2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gtkmozembed");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-gtksourceview");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-libart2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-libart2-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-libglade2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-panelapplet2");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-pango");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-pango-devel");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-poppler");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-rsvg");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:ruby-vte");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:8");

  script_set_attribute(attribute:"patch_publication_date", value:"2007/12/06");
  script_set_attribute(attribute:"plugin_publication_date", value:"2007/12/11");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_copyright(english:"This script is Copyright (C) 2007-2019 Tenable Network Security, Inc.");
  script_family(english:"Fedora Local Security Checks");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include("audit.inc");
include("global_settings.inc");
include("rpm.inc");

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
release = get_kb_item("Host/RedHat/release");
if (isnull(release) || "Fedora" >!< release) audit(AUDIT_OS_NOT, "Fedora");
os_ver = eregmatch(pattern: "Fedora.*release ([0-9]+)", string:release);
if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Fedora");
os_ver = os_ver[1];
if (! ereg(pattern:"^8([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Fedora 8.x", "Fedora " + os_ver);

if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);

cpu = get_kb_item("Host/cpu");
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Fedora", cpu);

flag = 0;
if (rpm_check(release:"FC8", reference:"ruby-atk-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-atk-devel-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-gconf2-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-gdkpixbuf2-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-glib2-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-glib2-devel-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-gnome2-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-gnome2-debuginfo-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-gnomecanvas2-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-gnomeprint2-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-gnomeprintui2-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-gnomevfs-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-gtk2-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-gtk2-devel-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-gtkglext-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-gtkhtml2-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-gtkmozembed-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-gtksourceview-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-libart2-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-libart2-devel-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-libglade2-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-panelapplet2-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-pango-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-pango-devel-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-poppler-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-rsvg-0.16.0-18.fc8")) flag++;
if (rpm_check(release:"FC8", reference:"ruby-vte-0.16.0-18.fc8")) flag++;


if (flag)
{
  if (report_verbosity > 0) security_warning(port:0, extra:rpm_report_get());
  else security_warning(0);
  exit(0);
}
else
{
  tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, "ruby-atk / ruby-atk-devel / ruby-gconf2 / ruby-gdkpixbuf2 / etc");
}

References