CVE

Id
9183  
CVE No.
CVE-2004-0755  
Status
Candidate  
Description
The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.  
Phase
Assigned (20040728)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
60062 9183 CVE-2004-0755 DEBIAN:DSA-537  View
60063 9183 CVE-2004-0755 URL:http://www.debian.org/security/2004/dsa-537  View
60064 9183 CVE-2004-0755 GENTOO:GLSA-200409-08  View
60065 9183 CVE-2004-0755 URL:http://www.gentoo.org/security/en/glsa/glsa-200409-08.xml  View
60066 9183 CVE-2004-0755 MANDRAKE:MDKSA-2004:128  View
60067 9183 CVE-2004-0755 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:128  View
60068 9183 CVE-2004-0755 OVAL:oval:org.mitre.oval:def:11128  View
60069 9183 CVE-2004-0755 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11128  View
60070 9183 CVE-2004-0755 SECUNIA:12290  View
60071 9183 CVE-2004-0755 URL:http://secunia.com/advisories/12290/  View
60072 9183 CVE-2004-0755 XF:ruby-filestore-pstore-insecure-permission(16996)  View

Related JVN