CVE-2008-3905

MEDIUM 5.8CVE-2008-3905 · Published 04/09/2008 · updated 16/06/2026

In short

CVE-2008-3905 is a MEDIUM (CVSS 5.8) vulnerability affecting ruby (ruby-lang).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ruby ruby-lang	`= 1.6= 1.6.8= 1.8.0= 1.8.1= 1.8.2= 1.8.3= 1.8.4= 1.8.6= 1.8.7≤ 1.8.5≤ 1.8.6≤ 1.8.7≤ 1.9`	No fix yet

Description

resolv.rb in Ruby 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier uses sequential transaction IDs and constant source ports for DNS requests, which makes it easier for remote attackers to spoof DNS responses, a different vulnerability than CVE-2008-1447.

References

secunia.com/advisories/31430
secunia.com/advisories/32165
secunia.com/advisories/32219
secunia.com/advisories/32255
secunia.com/advisories/32256
secunia.com/advisories/32371
secunia.com/advisories/32948
secunia.com/advisories/33178
security.gentoo.org/glsa/glsa-200812-17.xml
slackware.com/security/viewer.php
support.avaya.com/elmodocs2/security/ASA-2008-424.htm
debian.org/security/2008/dsa-1651
debian.org/security/2008/dsa-1652
openwall.com/lists/oss-security/2008/09/03/3 · Exploit
openwall.com/lists/oss-security/2008/09/04/9

More vulnerabilities in ruby

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free