Vulnerability-Lookup

CVE-2006-1931 (GCVE-0-2006-1931)

Vulnerability from cvelistv5 – Published: 2006-04-20 21:00 – Updated: 2024-08-07 17:27

Summary

The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.

Severity

No CVSS data available.

CWE

Assigner

redhat redhat root

References

22 references

URL	Tags
http://secunia.com/advisories/19772	third-party-advisoryx_refsource_SECUNIA
http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby…	x_refsource_MISC
http://secunia.com/advisories/21657	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/16904	third-party-advisoryx_refsource_SECUNIA
ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-w…	x_refsource_MISC
https://usn.ubuntu.com/273-1/	vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/20024	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/17645	vdb-entryx_refsource_BID
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.novell.com/linux/security/advisories/2…	vendor-advisoryx_refsource_SUSE
http://www.redhat.com/support/errata/RHSA-2006-04…	vendor-advisoryx_refsource_REDHAT
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.gentoo.org/security/en/glsa/glsa-20060…	vendor-advisoryx_refsource_GENTOO
https://bugzilla.redhat.com/bugzilla/show_bug.cgi…	x_refsource_CONFIRM
http://securitytracker.com/id?1015978	vdb-entryx_refsource_SECTRACK
http://www.debian.org/security/2006/dsa-1157	vendor-advisoryx_refsource_DEBIAN
http://secunia.com/advisories/19804	third-party-advisoryx_refsource_SECUNIA
http://www.mandriva.com/security/advisories?name=…	vendor-advisoryx_refsource_MANDRIVA
http://secunia.com/advisories/20064	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/20457	third-party-advisoryx_refsource_SECUNIA
http://www.osvdb.org/24972	vdb-entryx_refsource_OSVDB
ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-x…	x_refsource_MISC

Date Public

2005-11-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:27:29.579Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "19772",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19772"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787"
          },
          {
            "name": "21657",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21657"
          },
          {
            "name": "16904",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/16904"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch"
          },
          {
            "name": "USN-273-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "https://usn.ubuntu.com/273-1/"
          },
          {
            "name": "20024",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20024"
          },
          {
            "name": "17645",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/17645"
          },
          {
            "name": "oval:org.mitre.oval:def:11100",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100"
          },
          {
            "name": "SUSE-SR:2006:012",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2006-06-02.html"
          },
          {
            "name": "RHSA-2006:0427",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0427.html"
          },
          {
            "name": "ruby-socket-dos(26102)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26102"
          },
          {
            "name": "GLSA-200605-11",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540"
          },
          {
            "name": "1015978",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1015978"
          },
          {
            "name": "DSA-1157",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2006/dsa-1157"
          },
          {
            "name": "19804",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/19804"
          },
          {
            "name": "MDKSA-2006:079",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:079"
          },
          {
            "name": "20064",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20064"
          },
          {
            "name": "20457",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20457"
          },
          {
            "name": "24972",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/24972"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-11-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-03T20:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "19772",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19772"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787"
        },
        {
          "name": "21657",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21657"
        },
        {
          "name": "16904",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/16904"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch"
        },
        {
          "name": "USN-273-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "https://usn.ubuntu.com/273-1/"
        },
        {
          "name": "20024",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20024"
        },
        {
          "name": "17645",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/17645"
        },
        {
          "name": "oval:org.mitre.oval:def:11100",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100"
        },
        {
          "name": "SUSE-SR:2006:012",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2006-06-02.html"
        },
        {
          "name": "RHSA-2006:0427",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0427.html"
        },
        {
          "name": "ruby-socket-dos(26102)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26102"
        },
        {
          "name": "GLSA-200605-11",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540"
        },
        {
          "name": "1015978",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1015978"
        },
        {
          "name": "DSA-1157",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2006/dsa-1157"
        },
        {
          "name": "19804",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/19804"
        },
        {
          "name": "MDKSA-2006:079",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:079"
        },
        {
          "name": "20064",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20064"
        },
        {
          "name": "20457",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20457"
        },
        {
          "name": "24972",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/24972"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2006-1931",
    "datePublished": "2006-04-20T21:00:00.000Z",
    "dateReserved": "2006-04-20T00:00:00.000Z",
    "dateUpdated": "2024-08-07T17:27:29.579Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2006-1931",
      "date": "2026-09-22",
      "epss": "0.10192",
      "percentile": "0.95454"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6:*:*:*:*:*:*:*",
                  "matchCriteriaId": "46EE9BA9-DE82-4461-8D05-8B4DA2BAFE19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "0CCA0B06-65B5-43F5-949A-82E7D92DD90A",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.2:*:*:*:*:*:*:*",
                  "matchCriteriaId": "A236FC9B-F3CF-43A7-BB19-4255A2CC33D4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.3:*:*:*:*:*:*:*",
                  "matchCriteriaId": "94FF7BFC-8107-44F6-946A-D358152E53D6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.4:*:*:*:*:*:*:*",
                  "matchCriteriaId": "609CC668-6AE0-4047-BDE4-1A6CFD17901B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.5:*:*:*:*:*:*:*",
                  "matchCriteriaId": "9A035112-8F5B-455D-9085-993C9B66627C",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.6:*:*:*:*:*:*:*",
                  "matchCriteriaId": "E4C1DE25-8BD7-4729-800D-0B5D712838A5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.7:*:*:*:*:*:*:*",
                  "matchCriteriaId": "D9313467-150B-4231-80E5-35EFD6B64978",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:*:*:*:*:*:*:*",
                  "matchCriteriaId": "05A4185F-1CE1-48D1-B967-01A96527417B",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.1:*:*:*:*:*:*:*",
                  "matchCriteriaId": "551CCA30-00E2-46CF-A05B-FA8F9827CDF4",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data."
        }
      ],
      "id": "CVE-2006-1931",
      "lastModified": "2024-11-21T00:10:07.447",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "LOW",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "PARTIAL",
              "baseScore": 5.0,
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
              "version": "2.0"
            },
            "exploitabilityScore": 10.0,
            "impactScore": 2.9,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2006-04-20T21:02:00.000",
      "references": [
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Patch"
          ],
          "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch"
        },
        {
          "source": "secalert@redhat.com",
          "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Patch"
          ],
          "url": "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/16904"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/19772"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/19804"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/20024"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/20064"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/20457"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/21657"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://securitytracker.com/id?1015978"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.debian.org/security/2006/dsa-1157"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:079"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.novell.com/linux/security/advisories/2006-06-02.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.osvdb.org/24972"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0427.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.securityfocus.com/bid/17645"
        },
        {
          "source": "secalert@redhat.com",
          "tags": [
            "Patch"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26102"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://usn.ubuntu.com/273-1/"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch"
          ],
          "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch"
          ],
          "url": "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/16904"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/19772"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/19804"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/20024"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/20064"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/20457"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/21657"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://securitytracker.com/id?1015978"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.debian.org/security/2006/dsa-1157"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:079"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.novell.com/linux/security/advisories/2006-06-02.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.osvdb.org/24972"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.redhat.com/support/errata/RHSA-2006-0427.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/17645"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch"
          ],
          "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26102"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://usn.ubuntu.com/273-1/"
        }
      ],
      "sourceIdentifier": "secalert@redhat.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "NVD-CWE-Other"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "46EE9BA9-DE82-4461-8D05-8B4DA2BAFE19",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0CCA0B06-65B5-43F5-949A-82E7D92DD90A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.2:*:*:*:*:*:*:*",
                    "matchCriteriaId": "A236FC9B-F3CF-43A7-BB19-4255A2CC33D4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.3:*:*:*:*:*:*:*",
                    "matchCriteriaId": "94FF7BFC-8107-44F6-946A-D358152E53D6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.4:*:*:*:*:*:*:*",
                    "matchCriteriaId": "609CC668-6AE0-4047-BDE4-1A6CFD17901B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.5:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9A035112-8F5B-455D-9085-993C9B66627C",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.6:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E4C1DE25-8BD7-4729-800D-0B5D712838A5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.7:*:*:*:*:*:*:*",
                    "matchCriteriaId": "D9313467-150B-4231-80E5-35EFD6B64978",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:*:*:*:*:*:*:*",
                    "matchCriteriaId": "05A4185F-1CE1-48D1-B967-01A96527417B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "551CCA30-00E2-46CF-A05B-FA8F9827CDF4",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data."
          }
        ],
        "id": "CVE-2006-1931",
        "lastModified": "2026-04-16T00:27:16.627",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 5.0,
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 10.0,
              "impactScore": 2.9,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2006-04-20T21:02:00.000",
        "references": [
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch"
          },
          {
            "source": "secalert@redhat.com",
            "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/16904"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/19772"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/19804"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/20024"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/20064"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/20457"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/21657"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://securitytracker.com/id?1015978"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.debian.org/security/2006/dsa-1157"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:079"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.novell.com/linux/security/advisories/2006-06-02.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.osvdb.org/24972"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0427.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/bid/17645"
          },
          {
            "source": "secalert@redhat.com",
            "tags": [
              "Patch"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26102"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://usn.ubuntu.com/273-1/"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/16904"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/19772"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/19804"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/20024"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/20064"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/20457"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/21657"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securitytracker.com/id?1015978"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.debian.org/security/2006/dsa-1157"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:079"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.novell.com/linux/security/advisories/2006-06-02.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.osvdb.org/24972"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0427.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/17645"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch"
            ],
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26102"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://usn.ubuntu.com/273-1/"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-01-13T20:37:07+00:00",
      "cve": "CVE-2006-1931",
      "id": "CVE-2006-1931",
      "initial_release_date": "2006-01-01T00:00:00+00:00",
      "product_status:fixed": "204",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "security flaw",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2006/cve-2006-1931.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2023-12-09T03:42:36Z",
      "cve": "CVE-2006-1931",
      "id": "CVE-2006-1931",
      "initial_release_date": "2023-02-15T06:15:40Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2006-1931",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2006-1931.json",
      "version": "4"
    }
  }
}

FKIE_CVE-2006-1931

Vulnerability from fkie_nvd - Published: 2006-04-20 21:02 - Updated: 2026-06-16 22:23

Severity

Summary

The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.

References

URL	Tags
secalert@redhat.com	ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch	Patch
secalert@redhat.com	ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch
secalert@redhat.com	http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787	Patch
secalert@redhat.com	http://secunia.com/advisories/16904
secalert@redhat.com	http://secunia.com/advisories/19772
secalert@redhat.com	http://secunia.com/advisories/19804
secalert@redhat.com	http://secunia.com/advisories/20024
secalert@redhat.com	http://secunia.com/advisories/20064
secalert@redhat.com	http://secunia.com/advisories/20457
secalert@redhat.com	http://secunia.com/advisories/21657
secalert@redhat.com	http://securitytracker.com/id?1015978
secalert@redhat.com	http://www.debian.org/security/2006/dsa-1157
secalert@redhat.com	http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml
secalert@redhat.com	http://www.mandriva.com/security/advisories?name=MDKSA-2006:079
secalert@redhat.com	http://www.novell.com/linux/security/advisories/2006-06-02.html
secalert@redhat.com	http://www.osvdb.org/24972
secalert@redhat.com	http://www.redhat.com/support/errata/RHSA-2006-0427.html
secalert@redhat.com	http://www.securityfocus.com/bid/17645
secalert@redhat.com	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540	Patch
secalert@redhat.com	https://exchange.xforce.ibmcloud.com/vulnerabilities/26102
secalert@redhat.com	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100
secalert@redhat.com	https://usn.ubuntu.com/273-1/
af854a3a-2127-422b-91ae-364da2661108	ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch	Patch
af854a3a-2127-422b-91ae-364da2661108	ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch
af854a3a-2127-422b-91ae-364da2661108	http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787	Patch
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/16904
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19772
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/19804
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/20024
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/20064
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/20457
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/21657
af854a3a-2127-422b-91ae-364da2661108	http://securitytracker.com/id?1015978
af854a3a-2127-422b-91ae-364da2661108	http://www.debian.org/security/2006/dsa-1157
af854a3a-2127-422b-91ae-364da2661108	http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml
af854a3a-2127-422b-91ae-364da2661108	http://www.mandriva.com/security/advisories?name=MDKSA-2006:079
af854a3a-2127-422b-91ae-364da2661108	http://www.novell.com/linux/security/advisories/2006-06-02.html
af854a3a-2127-422b-91ae-364da2661108	http://www.osvdb.org/24972
af854a3a-2127-422b-91ae-364da2661108	http://www.redhat.com/support/errata/RHSA-2006-0427.html
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/17645
af854a3a-2127-422b-91ae-364da2661108	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540	Patch
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/26102
af854a3a-2127-422b-91ae-364da2661108	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100
af854a3a-2127-422b-91ae-364da2661108	https://usn.ubuntu.com/273-1/

Impacted products

Vendor	Product	Version
yukihiro_matsumoto	ruby	1.6
yukihiro_matsumoto	ruby	1.6.1
yukihiro_matsumoto	ruby	1.6.2
yukihiro_matsumoto	ruby	1.6.3
yukihiro_matsumoto	ruby	1.6.4
yukihiro_matsumoto	ruby	1.6.5
yukihiro_matsumoto	ruby	1.6.6
yukihiro_matsumoto	ruby	1.6.7
yukihiro_matsumoto	ruby	1.8
yukihiro_matsumoto	ruby	1.8.1

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "secalert@redhat.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "46EE9BA9-DE82-4461-8D05-8B4DA2BAFE19",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0CCA0B06-65B5-43F5-949A-82E7D92DD90A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A236FC9B-F3CF-43A7-BB19-4255A2CC33D4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "94FF7BFC-8107-44F6-946A-D358152E53D6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "609CC668-6AE0-4047-BDE4-1A6CFD17901B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A035112-8F5B-455D-9085-993C9B66627C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4C1DE25-8BD7-4729-800D-0B5D712838A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9313467-150B-4231-80E5-35EFD6B64978",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "05A4185F-1CE1-48D1-B967-01A96527417B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "551CCA30-00E2-46CF-A05B-FA8F9827CDF4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data."
    }
  ],
  "id": "CVE-2006-1931",
  "lastModified": "2026-06-16T22:23:57.787",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-04-20T21:02:00.000",
  "references": [
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch"
    },
    {
      "source": "secalert@redhat.com",
      "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/16904"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/19772"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/19804"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/20024"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/20064"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/20457"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://secunia.com/advisories/21657"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://securitytracker.com/id?1015978"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.debian.org/security/2006/dsa-1157"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:079"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.novell.com/linux/security/advisories/2006-06-02.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.osvdb.org/24972"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0427.html"
    },
    {
      "source": "secalert@redhat.com",
      "url": "http://www.securityfocus.com/bid/17645"
    },
    {
      "source": "secalert@redhat.com",
      "tags": [
        "Patch"
      ],
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26102"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100"
    },
    {
      "source": "secalert@redhat.com",
      "url": "https://usn.ubuntu.com/273-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/16904"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19772"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/19804"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/20024"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/20064"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/20457"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/21657"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1015978"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2006/dsa-1157"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:079"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.novell.com/linux/security/advisories/2006-06-02.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/24972"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0427.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/17645"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26102"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://usn.ubuntu.com/273-1/"
    }
  ],
  "sourceIdentifier": "secalert@redhat.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-J98G-25WQ-62H9

Vulnerability from github – Published: 2022-05-03 03:15 – Updated: 2022-05-03 03:15

Details

The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2006-1931"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2006-04-20T21:02:00Z",
    "severity": "MODERATE"
  },
  "details": "The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.",
  "id": "GHSA-j98g-25wq-62h9",
  "modified": "2022-05-03T03:15:51Z",
  "published": "2022-05-03T03:15:51Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2006-1931"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26102"
    },
    {
      "type": "WEB",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100"
    },
    {
      "type": "WEB",
      "url": "https://usn.ubuntu.com/273-1"
    },
    {
      "type": "WEB",
      "url": "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/16904"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19772"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/19804"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/20024"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/20064"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/20457"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/21657"
    },
    {
      "type": "WEB",
      "url": "http://securitytracker.com/id?1015978"
    },
    {
      "type": "WEB",
      "url": "http://www.debian.org/security/2006/dsa-1157"
    },
    {
      "type": "WEB",
      "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml"
    },
    {
      "type": "WEB",
      "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:079"
    },
    {
      "type": "WEB",
      "url": "http://www.novell.com/linux/security/advisories/2006-06-02.html"
    },
    {
      "type": "WEB",
      "url": "http://www.osvdb.org/24972"
    },
    {
      "type": "WEB",
      "url": "http://www.redhat.com/support/errata/RHSA-2006-0427.html"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/17645"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2006-1931

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.

Aliases

CVE-2006-1931

Aliases

CVE-2006-1931

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2006-1931",
    "description": "The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.",
    "id": "GSD-2006-1931",
    "references": [
      "https://www.suse.com/security/cve/CVE-2006-1931.html",
      "https://www.debian.org/security/2006/dsa-1157",
      "https://access.redhat.com/errata/RHSA-2006:0427"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2006-1931"
      ],
      "details": "The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.",
      "id": "GSD-2006-1931",
      "modified": "2023-12-13T01:19:55.243523Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secalert@redhat.com",
        "ID": "CVE-2006-1931",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch",
            "refsource": "MISC",
            "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch"
          },
          {
            "name": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch",
            "refsource": "MISC",
            "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch"
          },
          {
            "name": "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787",
            "refsource": "MISC",
            "url": "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787"
          },
          {
            "name": "http://secunia.com/advisories/16904",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/16904"
          },
          {
            "name": "http://secunia.com/advisories/19772",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/19772"
          },
          {
            "name": "http://secunia.com/advisories/19804",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/19804"
          },
          {
            "name": "http://secunia.com/advisories/20024",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/20024"
          },
          {
            "name": "http://secunia.com/advisories/20064",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/20064"
          },
          {
            "name": "http://secunia.com/advisories/20457",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/20457"
          },
          {
            "name": "http://secunia.com/advisories/21657",
            "refsource": "MISC",
            "url": "http://secunia.com/advisories/21657"
          },
          {
            "name": "http://securitytracker.com/id?1015978",
            "refsource": "MISC",
            "url": "http://securitytracker.com/id?1015978"
          },
          {
            "name": "http://www.debian.org/security/2006/dsa-1157",
            "refsource": "MISC",
            "url": "http://www.debian.org/security/2006/dsa-1157"
          },
          {
            "name": "http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml",
            "refsource": "MISC",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml"
          },
          {
            "name": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:079",
            "refsource": "MISC",
            "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:079"
          },
          {
            "name": "http://www.novell.com/linux/security/advisories/2006-06-02.html",
            "refsource": "MISC",
            "url": "http://www.novell.com/linux/security/advisories/2006-06-02.html"
          },
          {
            "name": "http://www.osvdb.org/24972",
            "refsource": "MISC",
            "url": "http://www.osvdb.org/24972"
          },
          {
            "name": "http://www.redhat.com/support/errata/RHSA-2006-0427.html",
            "refsource": "MISC",
            "url": "http://www.redhat.com/support/errata/RHSA-2006-0427.html"
          },
          {
            "name": "http://www.securityfocus.com/bid/17645",
            "refsource": "MISC",
            "url": "http://www.securityfocus.com/bid/17645"
          },
          {
            "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540",
            "refsource": "MISC",
            "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540"
          },
          {
            "name": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26102",
            "refsource": "MISC",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26102"
          },
          {
            "name": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100",
            "refsource": "MISC",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100"
          },
          {
            "name": "https://usn.ubuntu.com/273-1/",
            "refsource": "MISC",
            "url": "https://usn.ubuntu.com/273-1/"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.2:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.3:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.4:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.5:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.7:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2006-1931"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787",
              "refsource": "MISC",
              "tags": [
                "Patch"
              ],
              "url": "http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787"
            },
            {
              "name": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch",
              "refsource": "MISC",
              "tags": [
                "Patch"
              ],
              "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-webrick-dos-1.patch"
            },
            {
              "name": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189540"
            },
            {
              "name": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch",
              "refsource": "MISC",
              "tags": [],
              "url": "ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.2-xmlrpc-dos-1.patch"
            },
            {
              "name": "17645",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/17645"
            },
            {
              "name": "1015978",
              "refsource": "SECTRACK",
              "tags": [],
              "url": "http://securitytracker.com/id?1015978"
            },
            {
              "name": "19772",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19772"
            },
            {
              "name": "19804",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/19804"
            },
            {
              "name": "24972",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://www.osvdb.org/24972"
            },
            {
              "name": "16904",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/16904"
            },
            {
              "name": "GLSA-200605-11",
              "refsource": "GENTOO",
              "tags": [],
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200605-11.xml"
            },
            {
              "name": "RHSA-2006:0427",
              "refsource": "REDHAT",
              "tags": [],
              "url": "http://www.redhat.com/support/errata/RHSA-2006-0427.html"
            },
            {
              "name": "20024",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/20024"
            },
            {
              "name": "20064",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/20064"
            },
            {
              "name": "SUSE-SR:2006:012",
              "refsource": "SUSE",
              "tags": [],
              "url": "http://www.novell.com/linux/security/advisories/2006-06-02.html"
            },
            {
              "name": "20457",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/20457"
            },
            {
              "name": "DSA-1157",
              "refsource": "DEBIAN",
              "tags": [],
              "url": "http://www.debian.org/security/2006/dsa-1157"
            },
            {
              "name": "21657",
              "refsource": "SECUNIA",
              "tags": [],
              "url": "http://secunia.com/advisories/21657"
            },
            {
              "name": "MDKSA-2006:079",
              "refsource": "MANDRIVA",
              "tags": [],
              "url": "http://www.mandriva.com/security/advisories?name=MDKSA-2006:079"
            },
            {
              "name": "ruby-socket-dos(26102)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26102"
            },
            {
              "name": "oval:org.mitre.oval:def:11100",
              "refsource": "OVAL",
              "tags": [],
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11100"
            },
            {
              "name": "USN-273-1",
              "refsource": "UBUNTU",
              "tags": [],
              "url": "https://usn.ubuntu.com/273-1/"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2018-10-03T21:40Z",
      "publishedDate": "2006-04-20T21:02Z"
    }
  }
}

JVNDB-2005-000695

Vulnerability from jvndb - Published: 2008-05-20 15:00 - Updated:2008-05-20 15:00

Severity

N/A (UNKNOWN) - -

Summary

Ruby XMLRPC Server Denial of Service Vulnerability

Details

The User-level thread supported in Ruby does not switch while writing to a socket. This in turn blocks all subsequent procrsses when specially crafted requests are sent to the Web server and could result in a denial of service.

References

Type

URL

	CVE	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1931
	NVD	http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-1931
	SECUNIA	http://secunia.com/advisories/16904/
	BID	http://www.securityfocus.com/bid/17645
	XF	http://xforce.iss.net/xforce/xfdb/26102
	SECTRACK	http://securitytracker.com/id?1015978
	OSVDB	http://www.osvdb.org/24972

Impacted products

Vendor

Product

	Ruby	Ruby
	Cybertrust Japan Co., Ltd.	Asianux Server
	Red Hat, Inc.	Red Hat Enterprise Linux
	Red Hat, Inc.	Red Hat Enterprise Linux Desktop

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2005/JVNDB-2005-000695.html",
  "dc:date": "2008-05-21T00:00+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-05-21T00:00+09:00",
  "description": "The User-level thread supported in Ruby does not switch while writing to a socket. This in turn blocks all subsequent procrsses when specially crafted requests are sent to the Web server and could result in a denial of service.",
  "link": "https://jvndb.jvn.jp/en/contents/2005/JVNDB-2005-000695.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:ruby-lang:ruby",
      "@product": "Ruby",
      "@vendor": "Ruby",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:miraclelinux_asianux_server",
      "@product": "Asianux Server",
      "@vendor": "Cybertrust Japan Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:redhat:enterprise_linux",
      "@product": "Red Hat Enterprise Linux",
      "@vendor": "Red Hat, Inc.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:redhat:enterprise_linux_desktop",
      "@product": "Red Hat Enterprise Linux Desktop",
      "@vendor": "Red Hat, Inc.",
      "@version": "2.2"
    }
  ],
  "sec:cvss": {
    "@score": "5.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2005-000695",
  "sec:references": [
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1931",
      "@id": "CVE-2006-1931",
      "@source": "CVE"
    },
    {
      "#text": "http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-1931",
      "@id": "CVE-2006-1931",
      "@source": "NVD"
    },
    {
      "#text": "http://secunia.com/advisories/16904/",
      "@id": "SA16904",
      "@source": "SECUNIA"
    },
    {
      "#text": "http://www.securityfocus.com/bid/17645",
      "@id": "17645",
      "@source": "BID"
    },
    {
      "#text": "http://xforce.iss.net/xforce/xfdb/26102",
      "@id": "26102",
      "@source": "XF"
    },
    {
      "#text": "http://securitytracker.com/id?1015978",
      "@id": "1015978",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://www.osvdb.org/24972",
      "@id": "24972",
      "@source": "OSVDB"
    }
  ],
  "title": "Ruby XMLRPC Server Denial of Service Vulnerability"
}

RHSA-2006:0427

Vulnerability from csaf_redhat - Published: 2006-05-09 11:32 - Updated: 2026-06-25 10:33

Summary

Red Hat Security Advisory: ruby security update

Severity

Moderate

Scope

1 vulnerability in this advisory, including CVE-2006-1931.

CVE-2006-1931

The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.

Fixed: 118 products

https://access.redhat.com/errata/RHSA-2006:0427

Open the full advisory

RHSA-2006_0427

Vulnerability from csaf_redhat - Published: 2006-05-09 11:32 - Updated: 2024-11-22 00:15

Summary

Red Hat Security Advisory: ruby security update

Severity

Moderate

Scope

1 vulnerability in this advisory, including CVE-2006-1931.

CVE-2006-1931

The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.

Fixed: 204 products

https://access.redhat.com/errata/RHSA-2006:0427

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2006-1931 (GCVE-0-2006-1931)

FKIE_CVE-2006-1931

GHSA-J98G-25WQ-62H9

GSD-2006-1931

JVNDB-2005-000695

RHSA-2006:0427

RHSA-2006_0427

Tags

Sightings

Nomenclature

Related by attack behaviour