| Package | Affected versions | Patched versions |
|---|---|---|
| ruby | = 1.8= 1.8.1= 1.8.2= 1.8.2_pre1= 1.8.2_pre2= 1.8.3= 1.8.4= 1.8.5 |
The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free