Ruby vulnerability

2006-11-0100:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.2

Confidence

Low

EPSS

0.206

Percentile

96.4%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06
Ubuntu 5.10
Ubuntu 5.04

Details

An error was found in Ruby’s CGI library that did not correctly check
for the end of multipart MIME requests. Using a crafted HTTP request, a
remote user could cause a denial of service, where Ruby CGI applications
would end up in a loop, monopolizing a CPU.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchlibruby1.8< 1.8.4-5ubuntu1.1UNKNOWN
Ubuntu6.06noarchlibruby1.8< 1.8.4-1ubuntu1.2UNKNOWN
Ubuntu5.10noarchlibruby1.8< 1.8.2-9ubuntu1.3UNKNOWN
Ubuntu5.04noarchlibruby1.8< 1.8.1+1.8.2pre4-1ubuntu0.5UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.10	noarch	libruby1.8	< 1.8.4-5ubuntu1.1	UNKNOWN
Ubuntu	6.06	noarch	libruby1.8	< 1.8.4-1ubuntu1.2	UNKNOWN
Ubuntu	5.10	noarch	libruby1.8	< 1.8.2-9ubuntu1.3	UNKNOWN
Ubuntu	5.04	noarch	libruby1.8	< 1.8.1+1.8.2pre4-1ubuntu0.5	UNKNOWN