CVE-2006-5467
- State
- Published
- Severity
- Not scored
- Published
- Oct 27, 2006
- Updated
- Aug 7, 2024
- Reserved
- Oct 23, 2006
Description
The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and contains an inconsistent ID.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- GLSA-200611-12vendor-advisory
- http://docs.info.apple.com/article.html?artnum=305530
- 22932third-party-advisory
- ADV-2007-1939vdb-entry
- 23344third-party-advisory
- 22615third-party-advisory
- OpenPKG-SA-2006.030vendor-advisory
- APPLE-SA-2007-05-24vendor-advisory
- oval:org.mitre.oval:def:10185vdb-entrysignature
- 22761third-party-advisory
- 25402third-party-advisory
- SUSE-SR:2006:026vendor-advisory
- 23040third-party-advisory
- [mongrel-users] 20061025 [SEC] Mongrel Temporary Fix For cgi.rb 99% CPU DoS Attackmailing-list
- 20777vdb-entry
- MDKSA-2006:192vendor-advisory
- 1017194vdb-entry
- DSA-1235vendor-advisory
- USN-371-1vendor-advisory
- ADV-2006-4244vdb-entry
- RHSA-2006:0729vendor-advisory
- DSA-1234vendor-advisory
- 22929third-party-advisory
- ADV-2006-4245vdb-entry
- 22624third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.