// For flags

CVE-2006-5467

Ruby CGI multipart parsing DoS

Severity Score

7.5
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and contains an inconsistent ID.

La libreria CGI cgi.rb para Ruby 1.8 permite a un atacante remoto provocar denegación de servicio (bucle infinito y consumo de CPU) a través de una respuesta HTTP con un cuerpo multiparte MIME que contiene un limite especifico no valido, como se demosotro usando una especificaión que comenzaba con un "-" en vez de "--" y contiene un ID inconsistente.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2006-10-23 CVE Reserved
  • 2006-10-27 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-399: Resource Management Errors
CAPEC
References (28)
URL Tag Source
http://docs.info.apple.com/article.html?artnum=305530 X_refsource_confirm
http://rubyforge.org/pipermail/mongrel-users/2006-October/001946.html Mailing List
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10185 Signature
URL Date SRC
URL Date SRC
ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P 2017-10-11
http://secunia.com/advisories/22615 2017-10-11
http://secunia.com/advisories/22624 2017-10-11
http://secunia.com/advisories/22761 2017-10-11
http://secunia.com/advisories/22929 2017-10-11
http://secunia.com/advisories/23040 2017-10-11
http://secunia.com/advisories/23344 2017-10-11
http://security.gentoo.org/glsa/glsa-200611-12.xml 2017-10-11
http://securitytracker.com/id?1017194 2017-10-11
http://www.novell.com/linux/security/advisories/2006_26_sr.html 2017-10-11
http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.030-ruby.html 2017-10-11
http://www.redhat.com/support/errata/RHSA-2006-0729.html 2017-10-11
http://www.securityfocus.com/bid/20777 2017-10-11
http://www.ubuntu.com/usn/usn-371-1 2017-10-11
URL Date SRC
http://lists.apple.com/archives/security-announce/2007/May/msg00004.html 2017-10-11
http://secunia.com/advisories/22932 2017-10-11
http://secunia.com/advisories/25402 2017-10-11
http://www.debian.org/security/2006/dsa-1234 2017-10-11
http://www.debian.org/security/2006/dsa-1235 2017-10-11
http://www.mandriva.com/security/advisories?name=MDKSA-2006:192 2017-10-11
http://www.vupen.com/english/advisories/2006/4244 2017-10-11
http://www.vupen.com/english/advisories/2006/4245 2017-10-11
http://www.vupen.com/english/advisories/2007/1939 2017-10-11
https://access.redhat.com/security/cve/CVE-2006-5467 2006-11-08
https://bugzilla.redhat.com/show_bug.cgi?id=212396 2006-11-08
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Yukihiro Matsumoto
Search vendor "Yukihiro Matsumoto"
 Ruby
Search vendor "Yukihiro Matsumoto" for product "Ruby"
 1.8
Search vendor "Yukihiro Matsumoto" for product "Ruby" and version "1.8"
-
Affected