Ruby vulnerability

2006-12-0800:00:00

ubuntu.com

6.3 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.049 Low

EPSS

Percentile

92.7%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06
Ubuntu 5.10

Details

An error was found in Ruby’s CGI library that did not correctly quote
the boundary of multipart MIME requests. Using a crafted HTTP request,
a remote user could cause a denial of service, where Ruby CGI
applications would end up in a loop, monopolizing a CPU.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchlibruby1.8< 1.8.4-5ubuntu1.2UNKNOWN
Ubuntu6.06noarchlibruby1.8< 1.8.4-1ubuntu1.3UNKNOWN
Ubuntu5.10noarchlibruby1.8< 1.8.2-9ubuntu1.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.10	noarch	libruby1.8	< 1.8.4-5ubuntu1.2	UNKNOWN
Ubuntu	6.06	noarch	libruby1.8	< 1.8.4-1ubuntu1.3	UNKNOWN
Ubuntu	5.10	noarch	libruby1.8	< 1.8.2-9ubuntu1.4	UNKNOWN