Lucene search

K
redhatRedHatRHSA-2004:635
HistoryJan 17, 2005 - 12:00 a.m.

(RHSA-2004:635) ruby security update

2005-01-1700:00:00
access.redhat.com
12

EPSS

0.024

Percentile

90.0%

Ruby is an interpreted scripting language for object-oriented programming.

A flaw was dicovered in the CGI module of Ruby. If empty data is sent by
the POST method to the CGI script which requires MIME type
multipart/form-data, it can get stuck in a loop. A remote attacker could
trigger this flaw and cause a denial of service. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2004-0983 to this issue.

Users are advised to upgrade to this erratum package, which contains a
backported patch to cgi.rb.