Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Sergey Matveychuk

Pesquisador deFreeBSD.org
#42122de 53,633
6.4CVSS total
Vulnerabilidades · 1
PT-2006-7548
6.4
1970-01-01
Ruby · Ruby · CVE-2006-3694
**Name of the Vulnerable Software and Affected Versions** Ruby versions prior to 1.8.5 **Description** The issue involves multiple unspecified vulnerabilities that allow remote attackers to bypass "safe level" checks. This can be achieved through unspecified vectors involving the alias function and directory operations. The vulnerabilities may lead to a breach of confidentiality and integrity of protected information and can be exploited remotely. **Recommendations** For versions prior to 1.8.5, update to version 1.8.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the alias function and directory operations until a patch is available.