PT-2004-1996 · Ruby · Ruby
CVE-2004-0983
·
Publicado
2004-11-19
·
Atualizado
2018-10-03
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions:
Ruby versions 1.6 before 1.6.8
Ruby versions 1.8 before 1.8.2
Description:
The issue allows remote attackers to cause a denial of service, resulting in an infinite loop and CPU consumption, via a certain HTTP request to the CGI module.
Recommendations:
For Ruby versions 1.6 before 1.6.8, update to version 1.6.8 or later.
For Ruby versions 1.8 before 1.8.2, update to version 1.8.2 or later.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Ruby