CVE-2005-1992

Publication date 20 June 2005

Last updated 17 July 2025

Ubuntu priority

The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents “security protection” using handlers, which allows remote attackers to execute arbitrary commands.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
ruby1.8	7.04 feisty	Fixed 1.8.5-4ubuntu2
	6.10 edgy	Fixed 1.8.4-5ubuntu1.2
	6.06 LTS dapper	Fixed 1.8.4-1ubuntu1.3
ruby1.9	7.04 feisty	Fixed 1.9.0+20060423-3ubuntu1
	6.10 edgy	Fixed 1.9.0+20060423-3ubuntu1
	6.06 LTS dapper	Fixed 1.9.0+20060423-3ubuntu1

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-146-1
Ruby vulnerability
29 June 2005

Other references

https://www.cve.org/CVERecord?id=CVE-2005-1992