CVE-2006-4111

Publication date 14 August 2006

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with “severe” or “serious” impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
rails 7.10 gutsy
Not affected
7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Fixed 1.1.2-1ubuntu0.1