codesake-dawn 1.0.0.rc2 → 1.0.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (87) hide show
  1. checksums.yaml +4 -4
  2. data/.gitignore +0 -1
  3. data/Changelog.md +36 -5
  4. data/KnowledgeBase.md +153 -0
  5. data/README.md +36 -13
  6. data/Rakefile +21 -3
  7. data/Roadmap.md +22 -22
  8. data/codesake-dawn.gemspec +3 -3
  9. data/doc/dawn_1_0_announcement.md +40 -0
  10. data/lib/codesake/dawn/kb/basic_check.rb +42 -2
  11. data/lib/codesake/dawn/kb/cve_2012_1098.rb +31 -0
  12. data/lib/codesake/dawn/kb/cve_2012_2139.rb +28 -0
  13. data/lib/codesake/dawn/kb/cve_2012_2671.rb +30 -0
  14. data/lib/codesake/dawn/kb/cve_2012_6134.rb +1 -1
  15. data/lib/codesake/dawn/kb/cve_2013_0162.rb +30 -0
  16. data/lib/codesake/dawn/kb/cve_2013_0263.rb +3 -4
  17. data/lib/codesake/dawn/kb/cve_2013_1756.rb +28 -0
  18. data/lib/codesake/dawn/kb/cve_2013_4457.rb +1 -0
  19. data/lib/codesake/dawn/kb/dependency_check.rb +4 -0
  20. data/lib/codesake/dawn/kb/owasp_ror_cheatsheet.rb +2 -0
  21. data/lib/codesake/dawn/kb/pattern_match_check.rb +17 -1
  22. data/lib/codesake/dawn/knowledge_base.rb +10 -0
  23. data/lib/codesake/dawn/version.rb +8 -5
  24. data/spec/lib/dawn/codesake_knowledgebase_spec.rb +25 -0
  25. data/spec/lib/kb/codesake_cve_2013_4457_spec.rb +1 -0
  26. data/spec/lib/kb/codesake_dependency_version_check_spec.rb +65 -0
  27. data/spec/lib/kb/cve_2011_2705_spec.rb +28 -1
  28. data/spec/lib/kb/cve_2011_2930_spec.rb +25 -1
  29. data/spec/lib/kb/cve_2011_3009_spec.rb +18 -1
  30. data/spec/lib/kb/cve_2011_3187_spec.rb +17 -1
  31. data/spec/lib/kb/cve_2011_4319_spec.rb +37 -1
  32. data/spec/lib/kb/cve_2012_1098_spec.rb +36 -0
  33. data/spec/lib/kb/cve_2012_2139_spec.rb +20 -0
  34. data/spec/lib/kb/cve_2012_2671_spec.rb +23 -0
  35. data/spec/lib/kb/cve_2013_0162_spec.rb +23 -0
  36. data/spec/lib/kb/cve_2013_0256_spec.rb +34 -1
  37. data/spec/lib/kb/cve_2013_0263_spec.rb +4 -1
  38. data/spec/lib/kb/cve_2013_1756_spec.rb +23 -0
  39. data/spec/lib/kb/cve_2013_2090_spec.rb +13 -1
  40. data/spec/lib/kb/cve_2013_2119_spec.rb +20 -1
  41. data/spec/lib/kb/cve_2013_5647_spec.rb +12 -1
  42. data/spec/lib/kb/cve_2013_6459_spec.rb +12 -5
  43. data/spec/lib/kb/cve_2013_7086_spec.rb +1 -1
  44. metadata +28 -95
  45. data/spec/lib/kb/cve_2004_0983_spec.rb +0 -8
  46. data/spec/lib/kb/cve_2005_1992_spec.rb +0 -8
  47. data/spec/lib/kb/cve_2005_2337_spec.rb +0 -8
  48. data/spec/lib/kb/cve_2006_1931_spec.rb +0 -8
  49. data/spec/lib/kb/cve_2006_2582_spec.rb +0 -8
  50. data/spec/lib/kb/cve_2006_3694_spec.rb +0 -8
  51. data/spec/lib/kb/cve_2006_4112_spec.rb +0 -8
  52. data/spec/lib/kb/cve_2006_5467_spec.rb +0 -8
  53. data/spec/lib/kb/cve_2006_6303_spec.rb +0 -8
  54. data/spec/lib/kb/cve_2006_6852_spec.rb +0 -8
  55. data/spec/lib/kb/cve_2006_6979_spec.rb +0 -8
  56. data/spec/lib/kb/cve_2007_0469_spec.rb +0 -8
  57. data/spec/lib/kb/cve_2007_5162_spec.rb +0 -8
  58. data/spec/lib/kb/cve_2007_5379_spec.rb +0 -8
  59. data/spec/lib/kb/cve_2007_5380_spec.rb +0 -8
  60. data/spec/lib/kb/cve_2007_5770_spec.rb +0 -8
  61. data/spec/lib/kb/cve_2007_6077_spec.rb +0 -8
  62. data/spec/lib/kb/cve_2007_6612_spec.rb +0 -8
  63. data/spec/lib/kb/cve_2008_1145_spec.rb +0 -8
  64. data/spec/lib/kb/cve_2008_1891_spec.rb +0 -8
  65. data/spec/lib/kb/cve_2008_2376_spec.rb +0 -8
  66. data/spec/lib/kb/cve_2008_2662_spec.rb +0 -8
  67. data/spec/lib/kb/cve_2008_2663_spec.rb +0 -8
  68. data/spec/lib/kb/cve_2008_2664_spec.rb +0 -8
  69. data/spec/lib/kb/cve_2008_2725_spec.rb +0 -8
  70. data/spec/lib/kb/cve_2008_3655_spec.rb +0 -8
  71. data/spec/lib/kb/cve_2008_3657_spec.rb +0 -8
  72. data/spec/lib/kb/cve_2008_3790_spec.rb +0 -8
  73. data/spec/lib/kb/cve_2008_3905_spec.rb +0 -8
  74. data/spec/lib/kb/cve_2008_4094_spec.rb +0 -8
  75. data/spec/lib/kb/cve_2008_4310_spec.rb +0 -8
  76. data/spec/lib/kb/cve_2008_5189_spec.rb +0 -8
  77. data/spec/lib/kb/cve_2008_7248_spec.rb +0 -8
  78. data/spec/lib/kb/cve_2009_4078_spec.rb +0 -8
  79. data/spec/lib/kb/cve_2009_4124_spec.rb +0 -8
  80. data/spec/lib/kb/cve_2009_4214_spec.rb +0 -8
  81. data/spec/lib/kb/cve_2010_2489_spec.rb +0 -8
  82. data/spec/lib/kb/cve_2010_3933_spec.rb +0 -8
  83. data/spec/lib/kb/cve_2011_0188_spec.rb +0 -8
  84. data/spec/lib/kb/cve_2011_0739_spec.rb +0 -8
  85. data/spec/lib/kb/cve_2011_1004_spec.rb +0 -8
  86. data/spec/lib/kb/cve_2011_1005_spec.rb +0 -8
  87. data/spec/lib/kb/cve_2011_2686_spec.rb +0 -8
data/spec/lib/kb/cve_2004_0983_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2004-0983 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2004_0983.new
5
- # @check.debug = true
6
- end
7
- it "you may want to test something here..."
8
- end
data/spec/lib/kb/cve_2005_1992_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2005-1992 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2005_1992.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2005_2337_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2005-2337 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2005_2337.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2006_1931_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2006-1931 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2006_1931.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2006_2582_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2006-2582 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2006_2582.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2006_3694_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2006-3694 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2006_3694.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2006_4112_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2006-4112 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2006_4112.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2006_5467_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2006-5467 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2006_5467.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2006_6303_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2006-6303 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2006_6303.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2006_6852_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2006-6852 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2006_6852.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2006_6979_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2006-6979 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2006_6979.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2007_0469_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2007-0469 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2007_0469.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2007_5162_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2007-5162 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2007_5162.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2007_5379_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2007-5379 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2007_5379.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2007_5380_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2007-5380 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2007_5380.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2007_5770_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2007-5770 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2007_5770.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2007_6077_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2007-6077 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2007_6077.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2007_6612_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2007-6612 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2007_6612.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_1145_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-1145 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_1145.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_1891_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-1891 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_1891.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_2376_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-2376 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_2376.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_2662_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-2662 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_2662.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_2663_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-2663 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_2663.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_2664_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-2664 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_2664.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_2725_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-2725 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_2725.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_3655_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-3655 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_3655.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_3657_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-3657 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_3657.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_3790_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-3790 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_3790.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_3905_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-3905 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_3905.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_4094_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-4094 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_4094.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_4310_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-4310 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_4310.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_5189_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-5189 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_5189.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2008_7248_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2008-7248 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2008_7248.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2009_4078_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2009-4078 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2009_4078.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2009_4124_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2009-4124 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2009_4124.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2009_4214_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2009-4214 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2009_4214.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2010_2489_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2010-2489 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2010_2489.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2010_3933_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2010-3933 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2010_3933.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2011_0188_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2011-0188 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2011_0188.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2011_0739_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2011-0739 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2011_0739.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2011_1004_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2011-1004 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2011_1004.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2011_1005_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2011-1005 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2011_1005.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end
data/spec/lib/kb/cve_2011_2686_spec.rb DELETED
@@ -1,8 +0,0 @@
1
- require 'spec_helper'
2
- describe "The CVE-2011-2686 vulnerability" do
3
- before(:all) do
4
- @check = Codesake::Dawn::Kb::CVE_2011_2686.new
5
- # @check.debug = true
6
- end
7
- it "needs some test..."
8
- end