CVE-2006-6303

Mô tả

Tham khảo

• bugs.gentoo.org/show_bug.cgi · Patch
• bugzilla.redhat.com/bugzilla/show_bug.cgi · Patch
• docs.info.apple.com/article.html
• jvn.jp/jp/JVN%2384798830/index.html
• lists.apple.com/archives/security-announce/2007/May/msg00004.html
• secunia.com/advisories/23165
• secunia.com/advisories/23268
• secunia.com/advisories/23454
• secunia.com/advisories/25402
• secunia.com/advisories/27576
• secunia.com/advisories/31090
• security.gentoo.org/glsa/glsa-200612-21.xml
• securitytracker.com/id
• mandriva.com/security/advisories
• novell.com/linux/security/advisories/2007_4_sr.html

Lỗ hổng khác của ruby

• CVE-2006-5467TRUNG BÌNH 5.0The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP req…
• CVE-2006-3694TRUNG BÌNH 6.4Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors invol…
• CVE-2006-1931TRUNG BÌNH 5.0The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections)…
• CVE-2005-2337CAO 7.5Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag prote…
• CVE-2005-1992CAO 7.5The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using han…