NVD

Id
3655  
Name
CVE-2008-3790  
Description
The REXML module in Ruby 1.8.6 through 1.8.6-p287, 1.8.7 through 1.8.7-p72, and 1.9 allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML document with recursively nested entities, aka an "XML entity explosion."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-08-27  
Modified Date
2011-03-07  
Seq
2008-3790  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23048 3655 CVE-2008-3790 http://groups.google.com/group/comp.lang.ruby/browse_thread/thread/19f69e8a081fc0d1/e138e014b74352ca  View
23049 3655 CVE-2008-3790 APPLE-SA-2009-05-12  View
23050 3655 CVE-2008-3790 oval:org.mitre.oval:def:10393  View
23051 3655 CVE-2008-3790 GLSA-200812-17  View
23052 3655 CVE-2008-3790 http://support.apple.com/kb/HT3549  View
23053 3655 CVE-2008-3790 http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm  View
23054 3655 CVE-2008-3790 http://weblog.rubyonrails.org/2008/9/3/rails-2-0-4-maintenance-release  View
23055 3655 CVE-2008-3790 DSA-1651  View
23056 3655 CVE-2008-3790 DSA-1652  View
23057 3655 CVE-2008-3790 [oss-security] 20080825 CVE Request (ruby)  View
23058 3655 CVE-2008-3790 [oss-security] 20080826 Re: CVE Request (ruby)  View
23059 3655 CVE-2008-3790 [oss-security] 20080826 Re: CVE Request (ruby)  View
23060 3655 CVE-2008-3790 RHSA-2008:0897  View
23061 3655 CVE-2008-3790 http://www.ruby-lang.org/en/news/2008/08/23/dos-vulnerability-in-rexml/  View
23062 3655 CVE-2008-3790 http://www.ruby-lang.org/security/20080823rexml/rexml-expansion-fix.rb  View
23063 3655 CVE-2008-3790 30802  View
23064 3655 CVE-2008-3790 1020735  View
23065 3655 CVE-2008-3790 USN-651-1  View
23066 3655 CVE-2008-3790 USN-691-1  View
23067 3655 CVE-2008-3790 TA09-133A  View
23068 3655 CVE-2008-3790 ADV-2008-2428  View
23069 3655 CVE-2008-3790 ADV-2008-2483  View
23070 3655 CVE-2008-3790 ADV-2009-1297  View
23071 3655 CVE-2008-3790 ruby-rexml-dos(44628)  View
23072 3655 CVE-2008-3790 FEDORA-2008-8738  View
23073 3655 CVE-2008-3790 FEDORA-2008-8736  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46573 JVNDB-2008-001883 Ruby の REXML モジュールにおけるサービス運用妨害 (DoS) の脆弱性 Ruby の REXML モジュールには、再帰的にネストされた XML ドキュメントの処理に不備があるため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2008-3790 33903 CVE-2008-3790 3655 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001883.html 2008-08-27 2009-06-29 View