183 matches found
CVE-2010-3119
Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...
CVE-2010-3119
Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...
Memory corruption
Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...
CVE-2010-3119
Removed by vendor...
CVE-2010-3119
Google Chrome before 5.0.375.127 and webkitgtk before 1.2.6 do not properly support the Ruby language, which allows attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...
Fedora Update for ruby FEDORA-2010-0530
Check for the Version of ruby OpenVAS Vulnerability Test Fedora Update for ruby FEDORA-2010-0530 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...
Ruby on Rails http_authentication.rb Nil凭据绕过认证漏洞
BUGTRAQ ID: 35579 Ruby on Rails是一个新的Web应用程序框架,构建在Ruby语言之上。 Ruby on Rails的actionpack/lib/actioncontroller/httpauthentication.rb文件中的 validatedigestresponse函数在处理nil凭据时存在错误,如果没有找到用户返回的是nil,而正确的行为是返回 false。远程攻击者发送空的认证凭据就可以绕过HTTP认证获得非授权访问。 David Heinemeier Hansson Ruby on Rails 2.3.2 厂商补丁: David...
Debian Security Advisory DSA 1618-1 (ruby1.9)
The remote host is missing an update to ruby1.9 announced via advisory DSA 1618-1. OpenVAS Vulnerability Test $Id: deb16181.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1618-1 ruby1.9 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Ruby存在安全绕过和拒绝服务漏洞
BUGTRAQ ID: 30644 CNCAN ID:CNCAN-2008081415 Ruby是一种功能强大的面向对象的脚本语言。 Ruby的1.8.6-p287或1.8.7-p72之前版本存在多个安全漏洞,远程攻击者可以利用漏洞绕过某些安全限制、造成拒绝服务或执行欺骗攻击。 1 安全等级限制实现中存在多个错误,可导致在第4安全层调用untracevar、执行syslog操作、修改$PROGRAMNAME,或在1到3层调用不安全的方法。 2...
[SECURITY] [DSA 1618-1] New ruby1.9 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1618-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 26, 2008 http://www.debian.org/security/faq -...
DSA-1618-1 ruby1.9 - several vulnerabilities
Bulletin has no description...
Debian DSA-1612-1 : ruby1.8 - several vulnerabilities
Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-2662 Drew Yao discovered that multiple...
[SECURITY] [DSA 1612-1] New ruby1.8 packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1612-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 21, 2008 http://www.debian.org/security/faq -...
DSA-1612-1 ruby1.8 - several vulnerabilities
Bulletin has no description...
Denial of service vulnerability in Ruby CGI library (cgi.rb)
Overview cgi.rb, a standard library in Ruby, contains a denial of service vulnerability. This vulnerability is different from CVE-2006-5467. Impact A remote attacker could possibly conduct a DoS attack on a Ruby server by sending it a specially crafted request. Solution None...
Debian Security Advisory DSA 1139-1 (ruby1.6)
The remote host is missing an update to ruby1.6 announced via advisory DSA 1139-1. It was discovered that the interpreter for the Ruby language does not properly maintain safe levels for aliasing, directory accesses and regular expressions, which might lead to a bypass of security restrictions...
Debian Security Advisory DSA 1157-1 (ruby1.8)
The remote host is missing an update to ruby1.8 announced via advisory DSA 1157-1. Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to the bypass of security restrictions or denial of service. The Common Vulnerabilities and Exposures project...
Debian: Security Advisory (DSA-1157)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mandrake Linux Security Advisory : ruby (MDKSA-2006:134)
A number of flaws were discovered in the safe-level restrictions in the Ruby language. Because of these flaws, it would be possible for an attacker to create a carefully crafted malicious script that could allow them to bypass certain safe-level restrictions. Updated packages have been patched to...
DSA-1157 ruby1.8
Bulletin has no description...