Description
The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Tanaka Akira · textdoslinux
https://www.exploit-db.com/exploits/27723
References (22)
Core 22
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/26102
Patch x_refsource_confirm
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/19772
Patch x_refsource_misc
http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/21657
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/16904
Patch x_refsource_misc
ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch
Vendor Advisory vendor-advisory
x_refsource_ubuntu
https://usn.ubuntu.com/273-1/
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/20024
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/17645
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100
Vendor Advisory vendor-advisory
x_refsource_suse
http://www.novell.com/linux/security/advisories/2006-06-02.html
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0427.html
Third Party Advisory vendor-advisory
x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1015978
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2006/dsa-1157
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/19804
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:079
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/20064
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/20457
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/24972
Various Sources x_refsource_misc
ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch
Scores
EPSS
0.1321
EPSS Percentile
94.2%
Details
Status
published
Products (10)
yukihiro_matsumoto/ruby
1.6
yukihiro_matsumoto/ruby
1.6.1
yukihiro_matsumoto/ruby
1.6.2
yukihiro_matsumoto/ruby
1.6.3
yukihiro_matsumoto/ruby
1.6.4
yukihiro_matsumoto/ruby
1.6.5
yukihiro_matsumoto/ruby
1.6.6
yukihiro_matsumoto/ruby
1.6.7
yukihiro_matsumoto/ruby
1.8
yukihiro_matsumoto/ruby
1.8.1
Published
Apr 20, 2006
Tracked Since
Feb 18, 2026