NVD

Id
62765  
Name
CVE-2006-4111  
Description
Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-14  
Modified Date
2012-07-06  
Seq
2006-4111  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
326258 62765 CVE-2006-4111 http://blog.koehntopp.de/archives/1367-Ruby-On-Rails-Mandatory-Mystery-Patch.html  View
326259 62765 CVE-2006-4111 1016673  View
326260 62765 CVE-2006-4111 http://weblog.rubyonrails.org/2006/8/9/rails-1-1-5-mandatory-security-patch-and-other-tidbits  View
326261 62765 CVE-2006-4111 GLSA-200608-20  View
326262 62765 CVE-2006-4111 SUSE-SR:2006:021  View
326263 62765 CVE-2006-4111 19454  View
326264 62765 CVE-2006-4111 ADV-2006-3237  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60748 JVNDB-2006-003014 Ruby on Rails における "重大" または "深刻" な影響を引き起こす Ruby コードを実行される脆弱性 Ruby on Rails には、"重大" または "深刻" な影響を引き起こす Ruby コードを実行される脆弱性が存在します。 CVE-2006-4111 20213 CVE-2006-4111 62765 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003014.html 2006-08-09 2012-12-20 View