CVE-2005-1992

Mô tả

Tham khảo

• blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-core/5237 · Patch
• bugs.debian.org/cgi-bin/bugreport.cgi
• lists.apple.com/archives/security-announce/2005/Sep/msg00002.html
• secunia.com/advisories/16920
• auscert.org.au/5509
• ciac.org/ciac/bulletins/p-312.shtml
• debian.org/security/2005/dsa-748
• kb.cert.org/vuls/id/684913 · US Government Resource
• novell.com/linux/security/advisories/2005_18_sr.html
• redhat.com/support/errata/RHSA-2005-543.html
• securityfocus.com/bid/14016
• www2.ruby-lang.org/en/20050701.html
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10819

Lỗ hổng khác của ruby

• CVE-2006-6303TRUNG BÌNH 5.0The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows re…
• CVE-2006-5467TRUNG BÌNH 5.0The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP req…
• CVE-2006-3694TRUNG BÌNH 6.4Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors invol…
• CVE-2006-1931TRUNG BÌNH 5.0The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections)…
• CVE-2005-2337CAO 7.5Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag prote…