Red Hat Security AdvisoryRHSA-2007:0961
ruby security update
Released 2007-11-13 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 irb-1.8.1-7.EL4.8.1, irb-1.8.1-7.EL4.8.1.i386, irb-1.8.1-7.EL4.8.1.ia64 +25
- Red Hat Enterprise Linux Desktop version 4 irb-1.8.1-7.EL4.8.1, irb-1.8.1-7.EL4.8.1.i386, ruby-1.8.1-7.EL4.8.1 +11
- Red Hat Enterprise Linux ES version 4 irb-1.8.1-7.EL4.8.1, irb-1.8.1-7.EL4.8.1.i386, irb-1.8.1-7.EL4.8.1.ia64 +18
- Red Hat Enterprise Linux WS version 4 irb-1.8.1-7.EL4.8.1, irb-1.8.1-7.EL4.8.1.i386, irb-1.8.1-7.EL4.8.1.ia64 +18
Fixes 3 records
Priority LOW 30
The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP req…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04037 · Published 2006-12-06 · Fixed CWE-399
Priority LOW 27
The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in Ruby 1.8.5 and 1.8.6 do not verify that the commonName (CN) field in a server certificate matches the domain name in a re…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0187 · Published 2007-11-14 · Fixed CWE-287
Priority LOW 23
The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does not verify that the commonName (CN) field in a server certificate matches the domain name in an HTTPS r…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01681 · Published 2007-10-01 · Fixed CWE-287
THREATIST.IORead the docs