CVE-2006-6303
- State
- Published
- Severity
- Not scored
- Published
- Dec 6, 2006
- Updated
- Aug 7, 2024
- Reserved
- Dec 5, 2006
Description
The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://docs.info.apple.com/article.html?artnum=305530
- USN-394-1vendor-advisory
- 31090third-party-advisory
- 27576third-party-advisory
- ADV-2007-1939vdb-entry
- JVN#84798830third-party-advisory
- 23268third-party-advisory
- APPLE-SA-2007-05-24vendor-advisory
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=218287
- http://www.ruby-lang.org/en/news/2006/12/04/another-dos-vulnerability-in-cgi-library/
- 25402third-party-advisory
- 23165third-party-advisory
- RHSA-2007:0961vendor-advisory
- oval:org.mitre.oval:def:10529vdb-entrysignature
- ruby-cgi-library-dos(30734)vdb-entry
- 1017363vdb-entry
- SUSE-SR:2007:004vendor-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=157048
- http://www.ruby-lang.org/cgi-bin/cvsweb.cgi/ruby/lib/cgi.rb.diff?f=h&only_with_tag=MAIN&r1=text&tr1=1.92&r2=text&tr2=1.91
- ADV-2006-4855vdb-entry
- MDKSA-2006:225vendor-advisory
- GLSA-200612-21vendor-advisory
- 23454third-party-advisory
- 21441vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.