Vulnerability Description
Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".
CVSS Score
6.4
MEDIUM
AV:N/AC:L/Au:N/C:P/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Yukihiro Matsumoto | Ruby | 1.8.2 |
References
- ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P
- http://jvn.jp/jp/JVN%2313947696/index.html
- http://jvn.jp/jp/JVN%2383768862/index.html
- http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003907.html
- http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003915.html
- http://secunia.com/advisories/21009PatchVendor Advisory
- http://secunia.com/advisories/21233PatchVendor Advisory
- http://secunia.com/advisories/21236PatchVendor Advisory
- http://secunia.com/advisories/21272PatchVendor Advisory
- http://secunia.com/advisories/21337PatchVendor Advisory
- http://secunia.com/advisories/21598
- http://secunia.com/advisories/21657
- http://secunia.com/advisories/21749
- http://www.debian.org/security/2006/dsa-1139PatchVendor Advisory
- http://www.debian.org/security/2006/dsa-1157
FAQ
What is CVE-2006-3694?
CVE-2006-3694 is a vulnerability with a CVSS score of 6.4 (MEDIUM). Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".
How severe is CVE-2006-3694?
CVE-2006-3694 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2006-3694?
Check the references section above for vendor advisories and patch information. Affected products include: Yukihiro Matsumoto Ruby.