Description

Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.

Remediation

References

CVE-2006-4112

Related Vulnerabilities

MySQL CVE-2013-2376 Vulnerability (CVE-2013-2376)

Python Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2008-3142)

Zenphoto Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-0993)

WordPress Plugin Sell Downloads Unspecified Vulnerability (1.0.85)

MySQL CVE-2017-3458 Vulnerability (CVE-2017-3458)

Severity

High

Classification

CVE-2006-4112

Tags

Missing Update Known Vulnerabilities