Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

ruby1.8: denial of service

Package(s):

ruby1.8

CVE #(s):

CVE-2006-1931

Created:

April 24, 2006

Updated:

May 10, 2006

Description:

The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.

Alerts:

Gentoo	200605-11	2006-05-10
Red Hat	RHSA-2006:0427-01	2006-05-09
Mandriva	MDKSA-2006:079	2006-04-25
Ubuntu	USN-273-1	2006-04-24

(Log in to post comments)