The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a 0 character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ruby | Ruby-lang | 1.8.6-26 (including) | 1.8.6-26 (including) |
| Ruby | Ruby-lang | 1.8.7 (including) | 1.8.7 (including) |
| Ruby | Ruby-lang | 1.8.7-p160 (including) | 1.8.7-p160 (including) |
| Ruby | Ruby-lang | 1.8.7-p17 (including) | 1.8.7-p17 (including) |
| Ruby | Ruby-lang | 1.8.7-p173 (including) | 1.8.7-p173 (including) |
| Ruby | Ruby-lang | 1.8.7-p174 (including) | 1.8.7-p174 (including) |
| Ruby | Ruby-lang | 1.8.7-p22 (including) | 1.8.7-p22 (including) |
| Ruby | Ruby-lang | 1.8.7-p248 (including) | 1.8.7-p248 (including) |
| Ruby | Ruby-lang | 1.8.7-p249 (including) | 1.8.7-p249 (including) |
| Ruby | Ruby-lang | 1.8.7-p299 (including) | 1.8.7-p299 (including) |
| Ruby | Ruby-lang | 1.8.7-p301 (including) | 1.8.7-p301 (including) |
| Ruby | Ruby-lang | 1.8.7-p302 (including) | 1.8.7-p302 (including) |
| Ruby | Ruby-lang | 1.8.7-p330 (including) | 1.8.7-p330 (including) |
| Ruby | Ruby-lang | 1.8.7-p334 (including) | 1.8.7-p334 (including) |
| Ruby | Ruby-lang | 1.8.7-p352 (including) | 1.8.7-p352 (including) |
| Ruby | Ruby-lang | 1.8.7-p357 (including) | 1.8.7-p357 (including) |
| Ruby | Ruby-lang | 1.8.7-p358 (including) | 1.8.7-p358 (including) |
| Ruby | Ruby-lang | 1.8.7-p370 (including) | 1.8.7-p370 (including) |
| Ruby | Ruby-lang | 1.8.7-p371 (including) | 1.8.7-p371 (including) |
| Ruby | Ruby-lang | 1.8.7-p373 (including) | 1.8.7-p373 (including) |
| Ruby | Ruby-lang | 1.8.7-p71 (including) | 1.8.7-p71 (including) |
| Ruby | Ruby-lang | 1.8.7-p72 (including) | 1.8.7-p72 (including) |
| Ruby | Ruby-lang | 1.8.7-preview1 (including) | 1.8.7-preview1 (including) |
| Ruby | Ruby-lang | 1.8.7-preview2 (including) | 1.8.7-preview2 (including) |
| Ruby | Ruby-lang | 1.8.7-preview3 (including) | 1.8.7-preview3 (including) |
| Ruby | Ruby-lang | 1.8.7-preview4 (including) | 1.8.7-preview4 (including) |
| Ruby | Ruby-lang | 1.9.3 (including) | 1.9.3 (including) |
| Ruby | Ruby-lang | 1.9.3-p0 (including) | 1.9.3-p0 (including) |
| Ruby | Ruby-lang | 1.9.3-p125 (including) | 1.9.3-p125 (including) |
| Ruby | Ruby-lang | 1.9.3-p194 (including) | 1.9.3-p194 (including) |
| Ruby | Ruby-lang | 1.9.3-p286 (including) | 1.9.3-p286 (including) |
| Ruby | Ruby-lang | 1.9.3-p383 (including) | 1.9.3-p383 (including) |
| Ruby | Ruby-lang | 1.9.3-p385 (including) | 1.9.3-p385 (including) |
| Ruby | Ruby-lang | 1.9.3-p392 (including) | 1.9.3-p392 (including) |
| Ruby | Ruby-lang | 1.9.3-p426 (including) | 1.9.3-p426 (including) |
| Ruby | Ruby-lang | 1.9.3-p429 (including) | 1.9.3-p429 (including) |
| Ruby | Ruby-lang | 2.0.0-p0 (including) | 2.0.0-p0 (including) |
| Ruby | Ruby-lang | 2.0.0-p195 (including) | 2.0.0-p195 (including) |
| Ruby | Ruby-lang | 2.0.0-preview1 (including) | 2.0.0-preview1 (including) |
| Ruby | Ruby-lang | 2.0.0-preview2 (including) | 2.0.0-preview2 (including) |
| Ruby | Ruby-lang | 2.0.0-rc1 (including) | 2.0.0-rc1 (including) |
| Ruby | Ruby-lang | 2.0.0-rc2 (including) | 2.0.0-rc2 (including) |
| OpenStack 3 for RHEL 6 | RedHat | ruby193-ruby-0:1.9.3.429-34.2.el6ost | * |
| Red Hat Enterprise Linux 5 | RedHat | ruby-0:1.8.5-31.el5_9 | * |
| Red Hat Enterprise Linux 6 | RedHat | ruby-0:1.8.7.352-12.el6_4 | * |
| RHEL 6 Version of OpenShift Enterprise 1.2 | RedHat | ruby193-ruby-0:1.9.3.448-38.el6 | * |
| Ruby1.8 | Ubuntu | devel | * |
| Ruby1.8 | Ubuntu | lucid | * |
| Ruby1.8 | Ubuntu | precise | * |
| Ruby1.8 | Ubuntu | quantal | * |
| Ruby1.8 | Ubuntu | raring | * |
| Ruby1.8 | Ubuntu | upstream | * |
| Ruby1.9.1 | Ubuntu | devel | * |
| Ruby1.9.1 | Ubuntu | lucid | * |
| Ruby1.9.1 | Ubuntu | precise | * |
| Ruby1.9.1 | Ubuntu | quantal | * |
| Ruby1.9.1 | Ubuntu | raring | * |
| Ruby1.9.1 | Ubuntu | upstream | * |