Most recent entries from all

certa-2006-avi-562 — Deux vulnérabilités dans Ruby permettent à un utilisateur distant malintentionné de provoquer un déni de service.

certa-2006-avi-562

EUVD-2026-143636

fkie_cve-2006-5467

The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and contains an inconsistent ID.

GHSA-cgqx-jwj4-2jc4

gsd-2006-5467

jvndb-2006-000753

The cig.rb class in Ruby cannot handle HTTP requests with MIME multipart data set with an invalid boundry, which could trigger an infinate loop and result in consuming a large amount of CPU respurces.

RHSA-2006:0729 — Red Hat Security Advisory: ruby security update

Ruby CGI multipart parsing DoS