CVE-2006-3694 in Ruby

Riassunto

di MITRE

Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 18/07/2006
• Divulgazione: 21/07/2006
• Moderazione: accettato
• Voce: 2
• Collegare: mostrare
• CPE: pronto
• CWE: CWE-269 (confermato)
• CVSS: 6.4 (NVD)
• EPSS: 0.05739
• KEV: no
• Attività: molto basso
• Settore: Insurance, Finance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2006-3694
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2006-3694
• CVE Details: https://www.cvedetails.com/cve/CVE-2006-3694/