dawnscanner 1.6.8 → 2.0.0.rc4

data/spec/lib/kb/cve_2016_5697_spec.rb

@@ -1,15 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2016-5697 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::CVE_2016_5697.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"ruby-saml", :version=>"1.2.9"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"ruby-saml", :version=>"1.3.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/cve_2016_6316_spec.rb

@@ -1,44 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2016-6316 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::CVE_2016_6316.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"3.2.22.2"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-  it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"5.0.0.0"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"4.2.6"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"3.0.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"2.2.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"1.2.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"3.2.22.3"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"4.2.7.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"actionview", :version=>"5.0.0.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/cve_2016_6317_spec.rb

@@ -1,35 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2016-6317 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::CVE_2016_6317.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"activerecord", :version=>"4.2.7.0"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"activerecord", :version=>"4.2.7.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"activerecord", :version=>"4.1.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"activerecord", :version=>"3.1.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"activerecord", :version=>"2.1.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"activerecord", :version=>"1.1.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"activerecord", :version=>"5.0.0"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/cve_2016_6582_spec.rb

@@ -1,29 +0,0 @@
-require 'spec_helper'
-describe "The CVE-2016-6582 vulnerability" do
-  before(:all) do
-    @check = Dawn::Kb::CVE_2016_6582.new
-    # @check.debug = true
-  end
-  it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"doorkeeper", :version=>"1.2.0"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"doorkeeper", :version=>"2.5.0"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"doorkeeper", :version=>"3.9.0"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-
-  it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"doorkeeper", :version=>"4.1.0"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-
-  it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"doorkeeper", :version=>"4.2.0"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-end

data/spec/lib/kb/osvdb_105971_spec.rb

@@ -1,15 +0,0 @@
-require 'spec_helper'
-describe "The OSVDB_105971 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::OSVDB_105971.new
-		# @check.debug = true
-	end
-  it "is reported when a vulnerable version it has been found (0.4.14)" do
-    @check.dependencies = [{:name=>"sfpagent", :version=>"0.4.14"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is not reported when a safe version it has been found (0.4.15)" do
-    @check.dependencies = [{:name=>"sfpagent", :version=>"0.4.15"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-end

data/spec/lib/kb/osvdb_108530_spec.rb

@@ -1,22 +0,0 @@
-require 'spec_helper'
-describe "The OSVDB-108530 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::OSVDB_108530.new
-		# @check.debug = true
-	end
-  it "is reported when a vulnerable version it has been found (1.0.3.rc2)" do
-    @check.dependencies = [{:name=>"kajam", :version=>"1.0.3.rc2"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is not reported when a safe version it has been found (1.0.3)" do
-    @check.dependencies = [{:name=>"kajam", :version=>"1.0.3"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-  it "is not reported when a safe version it has been found (1.0.4)" do
-    @check.dependencies = [{:name=>"kajam", :version=>"1.0.4"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-
-  it "must be filled with CVE identifier"
-  it "must be filled with CVSS information"
-end

data/spec/lib/kb/osvdb_108563_spec.rb

@@ -1,18 +0,0 @@
-require 'spec_helper'
-describe "The OSVDB-108563 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::OSVDB_108563.new
-		# @check.debug = true
-	end
-
-  it "is reported when a vulnerable version it has been found (1.0.0)" do
-    @check.dependencies = [{:name=>"gyazo", :version=>"1.0.0"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is not reported when a safe version it has been found (0.4.15)" do
-    @check.dependencies = [{:name=>"gyazo", :version=>"1.0.1"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-  it "must be filled with CVE identifier"
-  it "must be filled with CVSS information"
-end

data/spec/lib/kb/osvdb_108569_spec.rb

@@ -1,17 +0,0 @@
-require 'spec_helper'
-describe "The OSVDB-108569 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::OSVDB_108569.new
-		# @check.debug = true
-	end
-  it "is reported when a vulnerable backup_checksum gem version it has been found (3.0.23)" do
-    @check.dependencies = [{:name=>"backup_checksum", :version=>"3.0.23"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is not reported when a safe backup_checksum gem version it has been found (3.0.24)" do
-    @check.dependencies = [{:name=>"backup_checksum", :version=>"3.0.24"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-  it "must be filled with CVE identifier"
-  it "must be filled with CVSS information"
-end

data/spec/lib/kb/osvdb_108570_spec.rb

@@ -1,17 +0,0 @@
-require 'spec_helper'
-describe "The OSVDB-108570 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::OSVDB_108570.new
-		# @check.debug = true
-	end
-  it "is reported when a vulnerable version it has been found (3.0.23)" do
-    @check.dependencies = [{:name=>"backup_checksum", :version=>"3.0.23"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is not reported when a safe version it has been found (0.4.15)" do
-    @check.dependencies = [{:name=>"backup_checksum", :version=>"3.0.24"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-  it "must be filled with CVE identifier"
-  it "must be filled with CVSS information"
-end

data/spec/lib/kb/osvdb_115654_spec.rb

@@ -1,15 +0,0 @@
-require 'spec_helper'
-describe "The OSVDB_115654 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::OSVDB_115654.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"raven-ruby", :version=>"0.12.1"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"raven-ruby", :version=>"0.12.2"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/osvdb_116010_spec.rb

@@ -1,15 +0,0 @@
-require 'spec_helper'
-describe "The OSVDB_116010 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::OSVDB_116010.new
-		# @check.debug = true
-	end
-	it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"doorkeeper", :version=>"1.4.0"}]
-		expect(@check.vuln?).to   eq(true)
-	end
-	it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"doorkeeper", :version=>"1.4.1"}]
-		expect(@check.vuln?).to   eq(false)
-	end
-end

data/spec/lib/kb/osvdb_117903_spec.rb

@@ -1,23 +0,0 @@
-require 'spec_helper'
-describe "The OSVDB_117903 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::OSVDB_117903.new
-		# @check.debug = true
-	end
-  it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"ruby-saml", :version=>"0.7.2"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"ruby-saml", :version=>"0.8.1"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"ruby-saml", :version=>"0.7.3"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-  it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"ruby-saml", :version=>"0.8.2"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-end

data/spec/lib/kb/osvdb_118579_spec.rb

@@ -1,8 +0,0 @@
-require 'spec_helper'
-describe "The OSVDB_118579 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::OSVDB_118579.new
-		# @check.debug = true
-	end
-	it "We are not currently aware of a solution for this vulnerability."
-end

data/spec/lib/kb/osvdb_118830_spec.rb

@@ -1,16 +0,0 @@
-require 'spec_helper'
-describe "The OSVDB_118830 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::OSVDB_118830.new
-		# @check.debug = true
-	end
-  it "is reported when a vulnerable version it has been found (2.1.1)" do
-    @check.dependencies = [{:name=>"doorkeeper", :version=>"2.1.1"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is not reported when a safe version it has been found (2.1.2)" do
-    @check.dependencies = [{:name=>"doorkeepr", :version=>"2.1.2"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-
-end

data/spec/lib/kb/osvdb_118954_spec.rb

@@ -1,20 +0,0 @@
-require 'spec_helper'
-describe "The OSVDB_118954 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::OSVDB_118954.new
-		# @check.debug = true
-	end
-  it "is reported when the vulnerable gem is detected" do
-    @check.dependencies = [{:name=>"rails", :version=>"4.2.0"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"rails", :version=>"4.2.1.rc3"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-  it "is not reported when a fixed release is detected" do
-    @check.dependencies = [{:name=>"rails", :version=>"4.0.3"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-
-end

data/spec/lib/kb/osvdb_119878_spec.rb

@@ -1,92 +0,0 @@
-require 'spec_helper'
-describe "The OSVDB_119878 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::OSVDB_119878.new
-		# @check.debug = true
-	end
-  it "is reported when a vulnerable version it has been found (1.6.1.a)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.6.1.a"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.6.1)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.6.1"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.6.2" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.6.2"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.6.2.a" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.6.2.a"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.6.3)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.6.3"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.6.4)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.6.4"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.6.5)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.6.5"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.6.6)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.6.6"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.6.7)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.6.7"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.6.8)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.6.8"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.6.8.rc1)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.6.8.rc1"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.6.9)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.6.9"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.7.0.rc1)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.7.0.rc1"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.7.0)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.7.0"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.7.1)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.7.1"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.7.2)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.7.2"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.7.2.rc1)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.7.2.rc1"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is reported when a vulnerable version it has been found (1.7.3)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.7.3"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is not reported when a safe version it has been found (1.8.0)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"1.8.0"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-  it "is not reported when a safe version it has been found (2.0.0.rc1)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"2.0.0.rc1"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-  it "is not reported when a safe version it has been found (2.0.0.rc2)" do
-    @check.dependencies = [{:name=>"rest-client", :version=>"2.0.0.rc2"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-
-end

data/spec/lib/kb/osvdb_119927_spec.rb

@@ -1,16 +0,0 @@
-require 'spec_helper'
-describe "The OSVDB_119927 vulnerability" do
-	before(:all) do
-		@check = Dawn::Kb::OSVDB_119927.new
-		# @check.debug = true
-	end
-  it "is reported when a vulnerable version it has been found (0.7.3)" do
-    @check.dependencies = [{:name=>"http", :version=>"0.7.3"}]
-    expect(@check.vuln?).to   eq(true)
-  end
-  it "is not reported when a safe version it has been found (0.8.0)" do
-    @check.dependencies = [{:name=>"http", :version=>"0.8.0"}]
-    expect(@check.vuln?).to   eq(false)
-  end
-
-end