NVD

Id
62766  
Name
CVE-2006-4112  
Description
Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-08-14  
Modified Date
2012-07-06  
Seq
2006-4112  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
326265 62766 CVE-2006-4112 1016673  View
326266 62766 CVE-2006-4112 http://weblog.rubyonrails.org/2006/8/10/rails-1-1-6-backports-and-full-disclosure  View
326267 62766 CVE-2006-4112 GLSA-200608-20  View
326268 62766 CVE-2006-4112 VU#699540  View
326269 62766 CVE-2006-4112 SUSE-SR:2006:021  View
326270 62766 CVE-2006-4112 20060811 Security Vulnerability in Ruby on Rails 1.1.x  View
326271 62766 CVE-2006-4112 19454  View
326272 62766 CVE-2006-4112 rubyonrails-url-code-execution(28364)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60749 JVNDB-2006-003015 Ruby on Rails の "依存型分類メカニズム" における任意の Ruby コードを実行される脆弱性 Ruby on Rails の "依存型分類メカニズム" は、ルーティングコード内で URL を適切に処理しないため、任意の Ruby コードを実行される脆弱性が存在します。 CVE-2006-4112 20214 CVE-2006-4112 62766 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003015.html 2006-08-10 2012-12-20 View