CVE-2006-4112
CVE-2006-4112
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.
EPSS 3,1% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
rails Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.1.6-1
Actualiza a 1.1.6-1
rails Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.1.6-1
Actualiza a 1.1.6-1
rails Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1.1.6-1
Actualiza a 1.1.6-1
Fuentes originales
- http://secunia.com/advisories/21466
- http://secunia.com/advisories/21749
- http://www.securityfocus.com/bid/19454
- http://weblog.rubyonrails.org/2006/8/10/rails-1-1-6-backports-and-full-disclosure
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28364
- http://www.novell.com/linux/security/advisories/2006_21_sr.html
- http://www.securityfocus.com/archive/1/442934/100/0/threaded
- http://www.gentoo.org/security/en/glsa/glsa-200608-20.xml
- http://www.kb.cert.org/vuls/id/699540
- http://secunia.com/advisories/21424
- http://securitytracker.com/id?1016673
- https://nvd.nist.gov/vuln/detail/CVE-2006-4112