Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

ruby: denial of service

Package(s):

ruby

CVE #(s):

CVE-2006-6303

Created:

December 7, 2006

Updated:

December 21, 2006

Description:

The Ruby CGI library, cgi.rb, does not properly detect boundaries in MIME multipart content. A remote attacker can use this to cause a denial of service.

Alerts:

OpenPKG	OpenPKG-SA-2006.040	2006-12-21
Gentoo	200612-21	2006-12-20
Ubuntu	USN-394-1	2006-12-08
Mandriva	MDKSA-2006:225	2006-12-06

(Log in to post comments)