CVE-2004-0983

Ruby <1.6.8, <1.8.2 - DoS

Title source: llm

Description

The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.

References (7)

[Vendor Advisory] http://www.mandriva.com/security/advisories?name=MDKSA-2004:128

[Vendor Advisory] http://www.redhat.com/support/errata/RHSA-2004-635.html

[Patch, Vendor Advisory] http://www.securityfocus.com/bid/11618

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/17985

[Vendor Advisory] https://usn.ubuntu.com/20-1/

[Third Party Advisory] http://www.debian.org/security/2004/dsa-586

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10268

Scores

EPSS 0.0112

EPSS Percentile 77.9%

Classification

Status draft

Affected Products (17)

yukihiro_matsumoto/ruby

gentoo/linux

mandrakesoft/mandrake_linux

mandrakesoft/mandrake_linux_corporate_server

... and 2 more

Timeline

Published Mar 01, 2005

Tracked Since Feb 18, 2026