CVE-2006-3694

Опубликовано: 21 июл. 2006

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".

Ссылки

ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P
http://jvn.jp/jp/JVN%2313947696/index.html
http://jvn.jp/jp/JVN%2383768862/index.html
http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003907.html
http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003915.html
http://secunia.com/advisories/21009
Patch
Vendor Advisory
http://secunia.com/advisories/21233
Patch
Vendor Advisory
http://secunia.com/advisories/21236
Patch
Vendor Advisory
http://secunia.com/advisories/21272
Patch
Vendor Advisory
http://secunia.com/advisories/21337
Patch
Vendor Advisory
http://secunia.com/advisories/21598
http://secunia.com/advisories/21657
http://secunia.com/advisories/21749
http://www.debian.org/security/2006/dsa-1139
Patch
Vendor Advisory
http://www.debian.org/security/2006/dsa-1157
http://www.mandriva.com/security/advisories?name=MDKSA-2006:134
http://www.novell.com/linux/security/advisories/2006_21_sr.html
http://www.osvdb.org/27144
http://www.osvdb.org/27145
http://www.redhat.com/support/errata/RHSA-2006-0604.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.2:*:*:*:*:*:*:*

cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.3:*:*:*:*:*:*:*

cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.4:*:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05392

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2006-3694

ubuntu

около 19 лет назад

Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".

CVE-2006-3694

redhat

около 19 лет назад

Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".

CVE-2006-3694

debian

около 19 лет назад

Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote ...

GHSA-rx2v-jmvm-3c4h

github

больше 3 лет назад

Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".

BDU:2015-01758

fstec

больше 10 лет назад

Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность и целостность защищаемой информации

EPSS

Процентиль: 90%

0.05392

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other