Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2006-3694
HistoryJul 21, 2006 - 2:03 p.m.

CVE-2006-3694

2006-07-2114:03:00
[email protected]
web.nvd.nist.gov
5

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.058

Percentile

93.4%

JSON

Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass “safe level” checks via unspecified vectors involving (1) the alias function and (2) “directory operations”.

Affected configurations

Nvd
Node
yukihiro_matsumotorubyMatch1.8.2
OR
yukihiro_matsumotorubyMatch1.8.3
OR
yukihiro_matsumotorubyMatch1.8.4
VendorProductVersionCPE
yukihiro_matsumotoruby1.8.2cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.2:*:*:*:*:*:*:*
yukihiro_matsumotoruby1.8.3cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.3:*:*:*:*:*:*:*
yukihiro_matsumotoruby1.8.4cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.4:*:*:*:*:*:*:*

References

Related

redhat 1
nessus 16
openvas 9
centos 2
cvelist 1
rubygems 1
freebsd 1
osv 1
debian 2
ubuntucve 1
cve 1
securityvulns 1
ubuntu 1
oraclelinux 2
redhat
redhat
(RHSA-2006:0604) ruby security update
2006-07-27 00:00:00
nessus
nessus
FreeBSD : ruby -- multiple vulnerabilities (76562594-1f19-11db-b7d4-0008743bf21a)
2006-08-04 00:00:00
Fedora Core 4 : ruby-1.8.4-3.fc4 (2006-842)
2007-01-17 00:00:00
CentOS 3 / 4 : ruby (CESA-2006:0604)
2006-08-04 00:00:00
openvas
openvas
FreeBSD Ports: ruby, ruby_static
2008-09-04 00:00:00
FreeBSD Ports: ruby, ruby_static
2008-09-04 00:00:00
SLES9: Security update for ruby
2009-10-10 00:00:00
centos
centos
irb, ruby security update
2006-07-31 00:23:57
irb, ruby security update
2006-07-29 11:51:34
cvelist
cvelist
CVE-2006-3694
2006-07-19 01:00:00
rubygems
rubygems
ruby1.8 vulnerability
2006-07-20 20:00:00
freebsd
freebsd
ruby -- multiple vulnerabilities
2006-07-12 00:00:00
osv
osv
ruby1.6 - missing privilege checks
2006-08-03 00:00:00
debian
debian
[SECURITY] [DSA 1139-1] New ruby1.6 packages fix privilege escalation
2006-08-03 17:35:15
[SECURITY] [DSA 1157-1] New ruby1.8 packages fix several vulnerabilities
2006-08-27 19:51:21
ubuntucve
ubuntucve
CVE-2006-3694
2006-07-21 00:00:00
cve
cve
CVE-2006-3694
2006-07-21 14:03:00
securityvulns
securityvulns
[SECURITY] [DSA 1139-1] New ruby1.6 packages fix privilege escalation
2006-08-04 00:00:00
ubuntu
ubuntu
ruby1.8 vulnerability
2006-07-28 00:00:00
oraclelinux
oraclelinux
Moderate ruby security update
2006-11-30 00:00:00
Moderate ruby security update
2006-11-30 00:00:00

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.6

Confidence

Low

EPSS

0.058

Percentile

93.4%

JSON
Related for NVD:CVE-2006-3694
redhat1nessus16openvas9centos2cvelist1rubygems1freebsd1osv1debian2ubuntucve1cve1securityvulns1ubuntu1oraclelinux2