ruby -- cgi.rb library Denial of Service

ID A8674C14-83D7-11DB-88D5-0012F06707F0
Type freebsd
Reporter FreeBSD
Modified 2010-05-12T00:00:00


The official ruby site reports:

Another vulnerability has been discovered in the CGI library (cgi.rb) that ships with Ruby which could be used by a malicious user to create a denial of service attack (DoS). A specific HTTP request for any web application using cgi.rb causes CPU consumption on the machine on which the web application is running. Many such requests result in a denial of service.