CVE

Id
13198  
CVE No.
CVE-2005-1992  
Status
Candidate  
Description
The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands.  
Phase
Assigned (20050620)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
95263 13198 CVE-2005-1992 CONFIRM:http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-core/5237  View
95264 13198 CVE-2005-1992 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=315064  View
95265 13198 CVE-2005-1992 CONFIRM:http://www2.ruby-lang.org/en/20050701.html  View
95266 13198 CVE-2005-1992 APPLE:APPLE-SA-2005-09-22  View
95267 13198 CVE-2005-1992 URL:http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html  View
95268 13198 CVE-2005-1992 DEBIAN:DSA-748  View
95269 13198 CVE-2005-1992 URL:http://www.debian.org/security/2005/dsa-748  View
95270 13198 CVE-2005-1992 REDHAT:RHSA-2005:543  View
95271 13198 CVE-2005-1992 URL:http://www.redhat.com/support/errata/RHSA-2005-543.html  View
95272 13198 CVE-2005-1992 SUSE:SUSE-SR:2005:018  View
95273 13198 CVE-2005-1992 URL:http://www.novell.com/linux/security/advisories/2005_18_sr.html  View
95274 13198 CVE-2005-1992 AUSCERT:ESB-2005.0732  View
95275 13198 CVE-2005-1992 URL:http://www.auscert.org.au/5509  View
95276 13198 CVE-2005-1992 CERT-VN:VU#684913  View
95277 13198 CVE-2005-1992 URL:http://www.kb.cert.org/vuls/id/684913  View
95278 13198 CVE-2005-1992 CIAC:P-312  View
95279 13198 CVE-2005-1992 URL:http://www.ciac.org/ciac/bulletins/p-312.shtml  View
95280 13198 CVE-2005-1992 BID:14016  View
95281 13198 CVE-2005-1992 URL:http://www.securityfocus.com/bid/14016  View
95282 13198 CVE-2005-1992 OVAL:oval:org.mitre.oval:def:10819  View
95283 13198 CVE-2005-1992 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10819  View
95284 13198 CVE-2005-1992 SECUNIA:16920  View

Related JVN