CVE-2006-6303

Publication date 6 December 2006

Last updated 24 July 2024


Ubuntu priority

The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.

Status

Package Ubuntu Release Status
ruby1.8 7.04 feisty
Fixed 1.8.5-4ubuntu2
6.10 edgy
Fixed 1.8.4-5ubuntu1.2
6.06 LTS dapper
Fixed 1.8.4-1ubuntu1.3

References

Related Ubuntu Security Notices (USN)

    • USN-394-1
    • Ruby vulnerability
    • 8 December 2006

Other references