Lucene search

RedhatCVE-2006-5467

HistoryOct 27, 2006 - 6:07 p.m.

CVE-2006-5467

2006-10-2718:07:00

CWE-399

redhat

web.nvd.nist.gov

cve-2006-5467

cgi.rb

ruby 1.8

denial of service

http request

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.3

Confidence

High

EPSS

0.206

Percentile

96.4%

JSON

The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a “-” instead of “–” and contains an inconsistent ID.

Affected configurations

Nvd

Node

yukihiro_matsumotorubyMatch1.8

VendorProductVersionCPE
yukihiro_matsumotoruby1.8cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
yukihiro_matsumoto	ruby	1.8	cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:::::::*

References

ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P

docs.info.apple.com/article.html?artnum=305530

lists.apple.com/archives/security-announce/2007/May/msg00004.html

rubyforge.org/pipermail/mongrel-users/2006-October/001946.html

secunia.com/advisories/22615

secunia.com/advisories/22624

secunia.com/advisories/22761

secunia.com/advisories/22929

secunia.com/advisories/22932

secunia.com/advisories/23040

secunia.com/advisories/23344

secunia.com/advisories/25402

security.gentoo.org/glsa/glsa-200611-12.xml

securitytracker.com/id?1017194

www.debian.org/security/2006/dsa-1234

www.debian.org/security/2006/dsa-1235

www.mandriva.com/security/advisories?name=MDKSA-2006:192

www.novell.com/linux/security/advisories/2006_26_sr.html

www.openpkg.org/security/advisories/OpenPKG-SA-2006.030-ruby.html

www.redhat.com/support/errata/RHSA-2006-0729.html

www.securityfocus.com/bid/20777

www.ubuntu.com/usn/usn-371-1

www.vupen.com/english/advisories/2006/4244

www.vupen.com/english/advisories/2006/4245

www.vupen.com/english/advisories/2007/1939

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10185

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.3

Confidence

High

EPSS

0.206

Percentile

96.4%

JSON

Related for CVE-2006-5467