CVE

Id
20215  
CVE No.
CVE-2006-4111  
Status
Candidate  
Description
Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.  
Phase
Assigned (20060814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187410 20215 CVE-2006-4111 CONFIRM:http://weblog.rubyonrails.org/2006/8/9/rails-1-1-5-mandatory-security-patch-and-other-tidbits  View
187411 20215 CVE-2006-4111 GENTOO:GLSA-200608-20  View
187412 20215 CVE-2006-4111 URL:http://www.gentoo.org/security/en/glsa/glsa-200608-20.xml  View
187413 20215 CVE-2006-4111 MISC:http://blog.koehntopp.de/archives/1367-Ruby-On-Rails-Mandatory-Mystery-Patch.html  View
187414 20215 CVE-2006-4111 SUSE:SUSE-SR:2006:021  View
187415 20215 CVE-2006-4111 URL:http://www.novell.com/linux/security/advisories/2006_21_sr.html  View
187416 20215 CVE-2006-4111 BID:19454  View
187417 20215 CVE-2006-4111 URL:http://www.securityfocus.com/bid/19454  View
187418 20215 CVE-2006-4111 VUPEN:ADV-2006-3237  View
187419 20215 CVE-2006-4111 URL:http://www.vupen.com/english/advisories/2006/3237  View
187420 20215 CVE-2006-4111 SECTRACK:1016673  View
187421 20215 CVE-2006-4111 URL:http://securitytracker.com/id?1016673  View
187422 20215 CVE-2006-4111 SECUNIA:21466  View
187423 20215 CVE-2006-4111 URL:http://secunia.com/advisories/21466  View
187424 20215 CVE-2006-4111 SECUNIA:21749  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
59680 JVNDB-2006-001946 Brian Fraval hitweb の genpage-cgi.php における PHP リモートファイルインクルージョンの脆弱性 Brian Fraval hitweb の genpage-cgi.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2006-4113 20215 5.1 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001946.html  View