CVE-2006-4112

Publication date 14 August 2006

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

Unspecified vulnerability in the “dependency resolution mechanism” in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or “data loss,” a different vulnerability than CVE-2006-4111.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
rails 7.10 gutsy
Not affected
7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Fixed 1.1.2-1ubuntu0.1