Lucene search

K
freebsdFreeBSD76562594-1F19-11DB-B7D4-0008743BF21A
HistoryJul 12, 2006 - 12:00 a.m.

ruby -- multiple vulnerabilities

2006-07-1200:00:00
vuxml.freebsd.org
17

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.072 Low

EPSS

Percentile

94.0%

Secunia reports:

Two vulnerabilities have been reported in Ruby, which can
be exploited by malicious people to bypass certain security
restrictions.

An error in the handling of the “alias” functionality
can be exploited to bypass the safe level protection and
replace methods called in the trusted level.
An error caused due to directory operations not being
properly checked can be exploited to bypass the safe
level protection and close untainted directory streams.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchruby< 1.8.*UNKNOWN
FreeBSDanynoarchruby_static< 1.8.*UNKNOWN

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

0.072 Low

EPSS

Percentile

94.0%