What is the severity of RHSA-2007:0961?

The severity of RHSA-2007:0961 is classified as moderate.

How do I fix RHSA-2007:0961?

To fix RHSA-2007:0961, update to the latest version of Ruby that addresses this CGI module vulnerability.

What are the potential effects of RHSA-2007:0961?

Exploiting RHSA-2007:0961 could allow an attacker to cause the Ruby CGI script to enter an infinite loop.

Who is affected by RHSA-2007:0961?

Any systems running vulnerable versions of Ruby's CGI module are at risk from RHSA-2007:0961.

How can I determine if my system is vulnerable to RHSA-2007:0961?

You can check if your system is running an affected version of Ruby's CGI module that has not been patched to mitigate the vulnerability.

Vulnerability/
RHSA-2007:0961

13/11/2007

RHSA-2007:0961: Moderate: ruby security update

First published: Tue Nov 13 2007(Updated: )

Ruby is an interpreted scripting language for object-oriented programming. A flaw was discovered in the way Ruby's CGI module handles certain HTTP requests. If a remote attacker sends a specially crafted request, it is possible to cause the ruby CGI script to enter an infinite loop, possibly causing a denial of service. (CVE-2006-6303) An SSL certificate validation flaw was discovered in several Ruby Net modules. The libraries were not checking the requested host name against the common name (CN) in the SSL server certificate, possibly allowing a man in the middle attack. (CVE-2007-5162, CVE-2007-5770) Users of Ruby should upgrade to these updated packages, which contain backported patches to resolve these issues.

Affected Software	Affected Version	How to fix
Ruby

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of RHSA-2007:0961?
The severity of RHSA-2007:0961 is classified as moderate.
How do I fix RHSA-2007:0961?
To fix RHSA-2007:0961, update to the latest version of Ruby that addresses this CGI module vulnerability.
What are the potential effects of RHSA-2007:0961?
Exploiting RHSA-2007:0961 could allow an attacker to cause the Ruby CGI script to enter an infinite loop.
Who is affected by RHSA-2007:0961?
Any systems running vulnerable versions of Ruby's CGI module are at risk from RHSA-2007:0961.
How can I determine if my system is vulnerable to RHSA-2007:0961?
You can check if your system is running an affected version of Ruby's CGI module that has not been patched to mitigate the vulnerability.

agent/severity
agent/type
agent/event
agent/last-modified-date
agent/first-publish-date
collector/redhat-errata
source/Red Hat
anchor-id/RHSA-2007:0961
agent/trending
agent/references
agent/title
agent/remedy
agent/description
agent/source
agent/tags
agent/softwarecombine
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/ruby
canonical/ruby

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.