Ruby vulnerability

2006-11-0100:00:00

ubuntu.com

6.2 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.206 Low

EPSS

Percentile

96.3%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06
Ubuntu 5.10
Ubuntu 5.04

Details

An error was found in Ruby’s CGI library that did not correctly check
for the end of multipart MIME requests. Using a crafted HTTP request, a
remote user could cause a denial of service, where Ruby CGI applications
would end up in a loop, monopolizing a CPU.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchlibruby1.8< 1.8.4-5ubuntu1.1UNKNOWN
Ubuntu6.06noarchlibruby1.8< 1.8.4-1ubuntu1.2UNKNOWN
Ubuntu5.10noarchlibruby1.8< 1.8.2-9ubuntu1.3UNKNOWN
Ubuntu5.04noarchlibruby1.8< 1.8.1+1.8.2pre4-1ubuntu0.5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.10	noarch	libruby1.8	< 1.8.4-5ubuntu1.1	UNKNOWN
Ubuntu	6.06	noarch	libruby1.8	< 1.8.4-1ubuntu1.2	UNKNOWN
Ubuntu	5.10	noarch	libruby1.8	< 1.8.2-9ubuntu1.3	UNKNOWN
Ubuntu	5.04	noarch	libruby1.8	< 1.8.1+1.8.2pre4-1ubuntu0.5	UNKNOWN