Posts Tagged: vulnerability
-
CVE-2006-3694: Bypassing Safe Levels in Ruby 1.8
An analysis of CVE-2006-3694, a vulnerability in Ruby 1.8 that allowed attackers to bypass $SAFE level restrictions, and why modern security relies on OS-level isolation.
-
Understanding CVE-2007-5162: Ruby Net::HTTPS Server Certificate CN Validation Flaw
An in-depth look at CVE-2007-5162, a vulnerability in Ruby's Net::HTTPS library that failed to validate server certificate Common Names, enabling man-in-the-middle attacks.
-
CVE-2007-5379: Ruby on Rails XML File Disclosure Vulnerability
An analysis of CVE-2007-5379, a moderate-severity vulnerability discovered in Ruby on Rails versions prior to 1.2.4, which allowed remote attackers to determine the existence of arbitrary files and read contents of XML files on the server.
-
Understanding CVE-2007-5380: Session Fixation via URL-Based Sessions in Early Rails
An in-depth look at CVE-2007-5380, a session fixation vulnerability in early Ruby on Rails versions caused by URL-based session identifiers.
-
CVE-2008-1145: Ruby WEBrick Directory Traversal Vulnerability
An analysis of CVE-2008-1145, a critical directory traversal vulnerability in Ruby's WEBrick server that allowed remote attackers to access arbitrary files.
-
CVE-2008-1891: WEBrick Directory Traversal in Ruby
Explore CVE-2008-1891, a directory traversal and source code disclosure vulnerability in Ruby WEBrick that affected Windows environments.
-
Understanding CVE-2008-2664: Unsafe Use of alloca in Ruby's rb_str_format
An in-depth look at CVE-2008-2664, a high-severity vulnerability in Ruby involving unsafe use of alloca in rb_str_format.
-
Understanding CVE-2008-3655: Multiple Insufficient $SAFE Level Restrictions in Ruby
An in-depth analysis of CVE-2008-3655, a vulnerability in early Ruby versions where incomplete $SAFE level checks allowed attackers to bypass sandbox restrictions.
-
CVE-2008-3657: Ruby DL Module Taint Bypass
Learn about CVE-2008-3657, a critical vulnerability in Ruby 1.8 and 1.9 where missing taint checks in the DL module allowed attackers to bypass $SAFE levels and achieve remote code execution.
-
Understanding CVE-2008-3790: Ruby REXML Denial of Service Vulnerability
An overview of CVE-2008-3790, a denial-of-service vulnerability in early Ruby versions where the REXML parser allowed unbounded XML entity expansion (the Billion Laughs attack).