CVE-2006-5467

Published: 27 October 2006

The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and contains an inconsistent ID.

Priority

Status

Package	Release	Status
ruby1.8 Launchpad, Ubuntu, Debian	dapper	Released (1.8.4-1ubuntu1.3)
	edgy	Released (1.8.4-5ubuntu1.2)
	feisty	Released (1.8.5-4ubuntu2)
	upstream	Needs triage

References

https://ubuntu.com/security/notices/USN-371-1
https://www.cve.org/CVERecord?id=CVE-2006-5467
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.