Red Hat Security AdvisoryRHSA-2006:0729
ruby security update
Released 2006-11-08 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 irb-1.6.8-9.EL3.8, irb-1.6.8-9.EL3.8.i386, ruby-1.6.8-9.EL3.8 +11
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 irb-1.6.4-2.AS21.4.i386, ruby-1.6.4-2.AS21.4, ruby-1.6.4-2.AS21.4.i386 +4
- Red Hat Enterprise Linux AS version 3 irb-1.6.8-9.EL3.8, irb-1.6.8-9.EL3.8.i386, irb-1.6.8-9.EL3.8.ia64 +25
- Red Hat Enterprise Linux AS version 4 irb-1.8.1-7.EL4.8, irb-1.8.1-7.EL4.8.i386, irb-1.8.1-7.EL4.8.ia64 +25
- Red Hat Enterprise Linux Desktop version 4 irb-1.8.1-7.EL4.8, irb-1.8.1-7.EL4.8.i386, ruby-1.8.1-7.EL4.8 +11
- Red Hat Enterprise Linux ES version 2.1 irb-1.6.4-2.AS21.4.i386, ruby-1.6.4-2.AS21.4, ruby-1.6.4-2.AS21.4.i386 +4
- Red Hat Enterprise Linux ES version 3 irb-1.6.8-9.EL3.8, irb-1.6.8-9.EL3.8.i386, irb-1.6.8-9.EL3.8.ia64 +18
- Red Hat Enterprise Linux ES version 4 irb-1.8.1-7.EL4.8, irb-1.8.1-7.EL4.8.i386, irb-1.8.1-7.EL4.8.ia64 +18
- Red Hat Enterprise Linux WS version 2.1 irb-1.6.4-2.AS21.4.i386, ruby-1.6.4-2.AS21.4, ruby-1.6.4-2.AS21.4.i386 +4
- Red Hat Enterprise Linux WS version 3 irb-1.6.8-9.EL3.8, irb-1.6.8-9.EL3.8.i386, irb-1.6.8-9.EL3.8.ia64 +18
- Red Hat Enterprise Linux WS version 4 irb-1.8.1-7.EL4.8, irb-1.8.1-7.EL4.8.i386, irb-1.8.1-7.EL4.8.ia64 +18
Fixes 1 record
Priority LOW 30
The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04523 · Published 2006-10-27 · Fixed CWE-399
