PT-2006-7548 · Ruby+1 · Ruby+1
Sergey Matveychuk
·
Publicado
1970-01-01
·
Atualizado
2017-10-11
·
CVE-2006-3694
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Ruby versions prior to 1.8.5
Description
The issue involves multiple unspecified vulnerabilities that allow remote attackers to bypass "safe level" checks. This can be achieved through unspecified vectors involving the alias function and directory operations. The vulnerabilities may lead to a breach of confidentiality and integrity of protected information and can be exploited remotely.
Recommendations
For versions prior to 1.8.5, update to version 1.8.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the alias function and directory operations until a patch is available.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Red Hat
Ruby