dawnscanner 1.6.8 → 2.0.0.rc4

data/spec/lib/kb/cve_2015_7578_spec.rb

@@ -1,15 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2015-7578 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::CVE_2015_7578.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"rails-html-sanitizer", :version=>"1.0.2"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"rails-html-sanitizer", :version=>"1.0.3"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/cve_2015_7579_spec.rb

@@ -1,23 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2015-7579 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::CVE_2015_7579.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"rails-html-sanitizer", :version=>"1.0.2"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-		@check.dependencies = [{:name=>"", :version=>"1.0.3"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-		@check.dependencies = [{:name=>"", :version=>"1.0.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-		@check.dependencies = [{:name=>"", :version=>"1.0.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/cve_2015_7581_spec.rb

@@ -1,51 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2015-7581 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::CVE_2015_7581.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"5.0.0.beta.1"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.2.5"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.1.14"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"3.2.22"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"5.0.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.2.5.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.2.6"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.1.14.2"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.1.15"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"3.2.22.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"3.2.23"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/cve_2015_8241_spec.rb

@@ -1,31 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2015-8241 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::CVE_2015_8241.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.6.5"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.6.0"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.6.7"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.6.7.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.5.6"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.4.6"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/cve_2015_8242_spec.rb

@@ -1,31 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2015-8242 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::CVE_2015_8242.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.6.5"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.6.0"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.6.7"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.6.7.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.5.6"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.4.6"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/cve_2015_8317_spec.rb

@@ -1,31 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2015-8317 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::CVE_2015_8317.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.6.5"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.6.0"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.6.7"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.6.7.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.5.6"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"nokogiri", :version=>"1.4.6"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/cve_2016_0751_spec.rb

@@ -1,55 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2016-0751 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::CVE_2016_0751.new
-		# @check.debug = true
-	end
-it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"5.0.0.beta.1"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.2.5"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.1.14"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.0.3"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"3.2.22"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"", :version=>"5.0.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"", :version=>"4.2.5.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"", :version=>"4.2.6"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"", :version=>"4.1.14.2"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"", :version=>"4.1.15"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"", :version=>"3.2.22.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"", :version=>"3.2.23"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/cve_2016_0752_spec.rb

@@ -1,51 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2016-0752 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::CVE_2016_0752.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"5.0.0.beta.1"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"4.2.5"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"4.1.14"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"3.2.22"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"5.0.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"4.2.5.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"4.2.6"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"4.1.14.2"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"4.1.15"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"3.2.22.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"3.2.23"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/cve_2016_0753_spec.rb

@@ -1,51 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2016-0753 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::CVE_2016_0753.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"activemodel", :version=>"5.0.0.beta.1"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"activemodel", :version=>"4.2.5"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"activemodel", :version=>"4.1.14"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"activemodel", :version=>"3.2.22"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"activemodel", :version=>"5.0.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"activemodel", :version=>"4.2.5.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"activemodel", :version=>"4.2.6"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"activemodel", :version=>"4.1.14.2"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"activemodel", :version=>"4.1.15"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"activemodel", :version=>"3.2.22.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"activemodel", :version=>"3.2.23"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/cve_2016_2097_spec.rb

@@ -1,35 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2016-2097 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::CVE_2016_2097.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"3.2.12"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"4.0.3"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"4.1.2"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"5.0.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"3.2.22.2"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"4.1.14.2"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"4.2.5.2"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/cve_2016_2098_spec.rb

@@ -1,55 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2016-2098 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::CVE_2016_2098.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"3.2.12"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.0.3"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.1.2"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.2.2"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"5.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"5.0.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"5.0.0.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"3.2.22.2"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.1.14.2"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.2.5.2"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.2.6"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionpack", :version=>"4.1.15"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end