CVE-2006-1931

Ruby < 1.8.2 - Denial of Service via HTTP/XMLRPC Server Blocking Sockets

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-1931. PoCs published by Tanaka Akira.

AI-analyzed exploit summary This exploit demonstrates a denial-of-service vulnerability in Ruby's WEBrick HTTP server by sending a malformed HTTP request that triggers blocking network operations. The issue affects Ruby versions prior to 1.8.3 and can cause the server to become unresponsive.

Description

The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Tanaka Akira · textdoslinux
https://www.exploit-db.com/exploits/27723

This exploit demonstrates a denial-of-service vulnerability in Ruby's WEBrick HTTP server by sending a malformed HTTP request that triggers blocking network operations. The issue affects Ruby versions prior to 1.8.3 and can cause the server to become unresponsive.

Classification
Working Poc 100%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Ruby WEBrick HTTP server (versions prior to 1.8.3)
No auth needed
Prerequisites: Network access to the target WEBrick server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (22)

Core 22
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/26102
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19772
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/21657
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16904
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/273-1/
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20024
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17645
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2006-06-02.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0427.html
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015978
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1157
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19804
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:079
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20064
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20457
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/24972

Scores

EPSS 0.1019
EPSS Percentile 95.1%

Details

Status published
Products (10)
yukihiro_matsumoto/ruby 1.6
yukihiro_matsumoto/ruby 1.6.1
yukihiro_matsumoto/ruby 1.6.2
yukihiro_matsumoto/ruby 1.6.3
yukihiro_matsumoto/ruby 1.6.4
yukihiro_matsumoto/ruby 1.6.5
yukihiro_matsumoto/ruby 1.6.6
yukihiro_matsumoto/ruby 1.6.7
yukihiro_matsumoto/ruby 1.8
yukihiro_matsumoto/ruby 1.8.1
Published Apr 20, 2006
Tracked Since Feb 18, 2026