Description

httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted HTTP request. NOTE: this issue exists because of an incomplete fix for CVE-2008-3656.

Remediation

References

CVE-2008-4310

Related Vulnerabilities

Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-30130)

Dolibarr Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-42220)

PHP Other Vulnerability (CVE-2005-0525)

WordPress Plugin Playbuzz Cross-Site Scripting (0.8.1)

WordPress Plugin S3 Video Cross-Site Scripting (0.982)

Severity

High

Classification

CVE-2008-4310

Tags

Missing Update Known Vulnerabilities