CVE-2004-0983
Fixed in a distro release EPSS 2%
The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.
Products: yukihiro_matsumoto ruby, gentoo linux, mandrakesoft mandrake_linux, mandrakesoft mandrake_linux_corporate_server, ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | ruby | 1.6.7-3woody4 |
| Red Hat Enterprise Linux 3 | irb | 0:1.6.8-9.EL3.3 |
| Red Hat Enterprise Linux 3 | ruby | 0:1.6.8-9.EL3.3 |
| Red Hat Enterprise Linux 3 | ruby-debuginfo | 0:1.6.8-9.EL3.3 |
| Red Hat Enterprise Linux 3 | ruby-devel | 0:1.6.8-9.EL3.3 |
| Red Hat Enterprise Linux 3 | ruby-docs | 0:1.6.8-9.EL3.3 |
| Red Hat Enterprise Linux 3 | ruby-libs | 0:1.6.8-9.EL3.3 |
| Red Hat Enterprise Linux 3 | ruby-mode | 0:1.6.8-9.EL3.3 |
| Red Hat Enterprise Linux 3 | ruby-tcltk | 0:1.6.8-9.EL3.3 |