Rails Denial of Service vulnerability

🗓️ 24 Oct 2017 18:33:38Reported by GitHub Advisory DatabaseType

Unspecified remote code execution in Ruby on Rails 1.1.0-1.1.

Reporter	Title	Published	Views	Family All 16
CVE	CVE-2006-4112	14 Aug 200621:00	–	cve
Cvelist	CVE-2006-4112	14 Aug 200621:00	–	cvelist
Debian CVE	CVE-2006-4112	14 Aug 200621:00	–	debiancve
EUVD	EUVD-2017-0210	7 Oct 202500:30	–	euvd
Tenable Nessus	GLSA-200608-20 : Ruby on Rails: Several vulnerabilities	21 Aug 200600:00	–	nessus
Tenable Nessus	Ruby on Rails Routing Code URL Code Evaluation DoS	14 Aug 200600:00	–	nessus
Gentoo Linux	Ruby on Rails: Several vulnerabilities	14 Aug 200600:00	–	gentoo
NVD	CVE-2006-4112	14 Aug 200621:04	–	nvd
OpenVAS	Gentoo Security Advisory GLSA 200608-20 (rails)	24 Sep 200800:00	–	openvas
OSV	DEBIAN-CVE-2006-4112	14 Aug 200621:04	–	osv

Vulners

Node

rubyonrails railsRange1.1.0–1.1.6rubygems

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2006-4112
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/28364
weblog	www.weblog.rubyonrails.org/2006/8/10/rails-1-1-6-backports-and-full-disclosure
gentoo	www.gentoo.org/security/en/glsa/glsa-200608-20.xml
kb	www.kb.cert.org/vuls/id/699540
novell	www.novell.com/linux/security/advisories/2006_21_sr.html
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/rails/CVE-2006-4112.yml
web	www.web.archive.org/web/20200301174340/http://www.securityfocus.com/bid/19454
web	www.web.archive.org/web/20200804225700/http://www.securityfocus.com/archive/1/442934/100/0/threaded
web	www.web.archive.org/web/20200808083046/http://securitytracker.com/id

03 Apr 2025 14:27Current

7.2High risk

Vulners AI Score7.2

CVSS 27.5

EPSS0.07371