Lucene search
FreeBSD30ACB8AE-9D46-11DC-9114-001C2514716CHistoryNov 24, 2007 - 12:00 a.m.
rubygem-rails -- session-fixation vulnerability
2007-11-2400:00:00
vuxml.freebsd.org
17
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.028 Low
EPSS
Percentile
90.5%
Rails core team reports:
The rails core team has released ruby on rails 1.2.6 to
address a bug in the fix for session fixation attacks
(CVE-2007-5380). The CVE Identifier for this new issue
is CVE-2007-6077.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | rubygem-rails | < 1.2.6 | UNKNOWN |
Related
openvas
openvas
FreeBSD Ports: rubygem-rails
2008-09-04 00:00:00
FreeBSD Ports: rubygem-rails
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200912-02 (rails)
2009-12-30 00:00:00
ubuntucve
ubuntucve
CVE-2007-6077
2007-11-21 00:00:00
CVE-2007-5380
2007-10-19 00:00:00
cve
cve
CVE-2007-6077
2007-11-21 21:46:00
CVE-2007-5380
2007-10-19 23:17:00
osv
osv
session fixation protection mechanism in cgi_process.rb in Rails
2017-10-24 18:33:38
Session fixation vulnerability in Rails
2017-10-24 18:33:38
github
github
session fixation protection mechanism in cgi_process.rb in Rails
2017-10-24 18:33:38
Session fixation vulnerability in Rails
2017-10-24 18:33:38
nessus
nessus
FreeBSD : rubygem-rails -- session-fixation vulnerability (30acb8ae-9d46-11dc-9114-001c2514716c)
2007-11-29 00:00:00
Ruby on Rails Multiple Method Session Fixation
2007-11-28 00:00:00
openSUSE 10 Security Update : rubygem-actionpack (rubygem-actionpack-4754)
2007-11-30 00:00:00
prion
prion
Session fixation
2007-11-21 21:46:00
Session fixation
2007-10-19 23:17:00
debiancve
debiancve
CVE-2007-6077
2007-11-21 21:46:00
CVE-2007-5380
2007-10-19 23:17:00
rubygems
rubygems
Moderate severity vulnerability that affects rails
2017-10-23 21:00:00
securityvulns
securityvulns
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2007-11-17 00:00:00
[ GLSA 200711-17 ] Ruby on Rails: Multiple vulnerabilities
2007-11-15 00:00:00
gentoo
gentoo
Ruby on Rails: Multiple vulnerabilities
2009-12-20 00:00:00
Ruby on Rails: Multiple vulnerabilities
2007-11-14 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.028 Low
EPSS
Percentile
90.5%
Related for 30ACB8AE-9D46-11DC-9114-001C2514716C