CVE

Id
20216  
CVE No.
CVE-2006-4112  
Status
Candidate  
Description
Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.  
Phase
Assigned (20060814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187425 20216 CVE-2006-4112 BUGTRAQ:20060811 Security Vulnerability in Ruby on Rails 1.1.x  View
187426 20216 CVE-2006-4112 URL:http://www.securityfocus.com/archive/1/archive/1/442934/100/0/threaded  View
187427 20216 CVE-2006-4112 CONFIRM:http://weblog.rubyonrails.org/2006/8/10/rails-1-1-6-backports-and-full-disclosure  View
187428 20216 CVE-2006-4112 GENTOO:GLSA-200608-20  View
187429 20216 CVE-2006-4112 URL:http://www.gentoo.org/security/en/glsa/glsa-200608-20.xml  View
187430 20216 CVE-2006-4112 SUSE:SUSE-SR:2006:021  View
187431 20216 CVE-2006-4112 URL:http://www.novell.com/linux/security/advisories/2006_21_sr.html  View
187432 20216 CVE-2006-4112 CERT-VN:VU#699540  View
187433 20216 CVE-2006-4112 URL:http://www.kb.cert.org/vuls/id/699540  View
187434 20216 CVE-2006-4112 BID:19454  View
187435 20216 CVE-2006-4112 URL:http://www.securityfocus.com/bid/19454  View
187436 20216 CVE-2006-4112 SECTRACK:1016673  View
187437 20216 CVE-2006-4112 URL:http://securitytracker.com/id?1016673  View
187438 20216 CVE-2006-4112 SECUNIA:21424  View
187439 20216 CVE-2006-4112 URL:http://secunia.com/advisories/21424  View
187440 20216 CVE-2006-4112 SECUNIA:21466  View
187441 20216 CVE-2006-4112 URL:http://secunia.com/advisories/21466  View
187442 20216 CVE-2006-4112 SECUNIA:21749  View
187443 20216 CVE-2006-4112 URL:http://secunia.com/advisories/21749  View
187444 20216 CVE-2006-4112 XF:rubyonrails-url-code-execution(28364)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60750 JVNDB-2006-003016 Nicolas Grandjean PHPMyRing の view_com.php における SQL インジェクションの脆弱性 Nicolas Grandjean PHPMyRing の view_com.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4114 20216 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003016.html  View