CVE-2006-3694
Fixed in a distro release EPSS 6%
Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".
Products: yukihiro_matsumoto ruby
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.1 | ruby1.6 | 1.6.8-12sarge2 |
| Debian 3.1 | ruby1.8 | 1.8.2-7sarge4 |
| Red Hat Enterprise Linux 3 | irb | 0:1.6.8-9.EL3.6 |
| Red Hat Enterprise Linux 3 | ruby | 0:1.6.8-9.EL3.6 |
| Red Hat Enterprise Linux 3 | ruby-debuginfo | 0:1.6.8-9.EL3.6 |
| Red Hat Enterprise Linux 3 | ruby-devel | 0:1.6.8-9.EL3.6 |
| Red Hat Enterprise Linux 3 | ruby-docs | 0:1.6.8-9.EL3.6 |
| Red Hat Enterprise Linux 3 | ruby-libs | 0:1.6.8-9.EL3.6 |
| Red Hat Enterprise Linux 3 | ruby-mode | 0:1.6.8-9.EL3.6 |
| Red Hat Enterprise Linux 3 | ruby-tcltk | 0:1.6.8-9.EL3.6 |
| Red Hat Enterprise Linux 4 | irb | 0:1.8.1-7.EL4.6 |
| Red Hat Enterprise Linux 4 | ruby | 0:1.8.1-7.EL4.6 |
| Red Hat Enterprise Linux 4 | ruby-debuginfo | 0:1.8.1-7.EL4.6 |
| Red Hat Enterprise Linux 4 | ruby-devel | 0:1.8.1-7.EL4.6 |
| Red Hat Enterprise Linux 4 | ruby-docs | 0:1.8.1-7.EL4.6 |
| Red Hat Enterprise Linux 4 | ruby-libs | 0:1.8.1-7.EL4.6 |
| Red Hat Enterprise Linux 4 | ruby-mode | 0:1.8.1-7.EL4.6 |
| Red Hat Enterprise Linux 4 | ruby-tcltk | 0:1.8.1-7.EL4.6 |