CVE-2005-1992

CVE-2005-1992 affects Ruby’s XMLRPC implementation. The XMLRPC server in utils.rb (Ruby libruby 1.8) uses an insecure default for public_instance_methods, enabling a remote attacker to trigger the XMLRPC handler to execute arbitrary commands. Impact is remote code execution via the XMLRPC service...

CVE-2005-1992: Undefined Security Weakness

The XMLRPC server in utils.rb for the ruby library libruby 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands...