Ruby vulnerability

2006-12-0800:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.068

Percentile

93.9%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06
Ubuntu 5.10

Details

An error was found in Ruby’s CGI library that did not correctly quote
the boundary of multipart MIME requests. Using a crafted HTTP request,
a remote user could cause a denial of service, where Ruby CGI
applications would end up in a loop, monopolizing a CPU.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchlibruby1.8< 1.8.4-5ubuntu1.2UNKNOWN
Ubuntu6.06noarchlibruby1.8< 1.8.4-1ubuntu1.3UNKNOWN
Ubuntu5.10noarchlibruby1.8< 1.8.2-9ubuntu1.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	6.10	noarch	libruby1.8	< 1.8.4-5ubuntu1.2	UNKNOWN
Ubuntu	6.06	noarch	libruby1.8	< 1.8.4-1ubuntu1.3	UNKNOWN
Ubuntu	5.10	noarch	libruby1.8	< 1.8.2-9ubuntu1.4	UNKNOWN