Vulnerability in Gentoo Linux
CVE-2004-0983
The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.
EPSS: 0.019 (77.5th percentile) — read the EPSS interpretation.
Affected products
- Gentoo Linux
- Mandrakesoft Mandrake_linux — versions 9.2, 10.0, 10.1
- Mandrakesoft Mandrake_linux_corporate_server — versions 2.1
- Yukihiro_matsumoto Ruby — versions 1.6, 1.6.7, 1.8
- Ubuntu Ubuntu_linux — versions 4.1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_REDHAT, vendor-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_MANDRAKE)
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_UBUNTU, vendor-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_DEBIAN)
- cve@mitre.org (vdb-entry, x_refsource_XF)