Ruby 1.8.x - Secunia

Blog

Vulnerability Report: Ruby 1.8.x

This vulnerability report for Ruby 1.8.x contains a complete overview of all Secunia advisories affecting it. You can use this vulnerability report to ensure that you are aware of all vulnerabilities, both patched and unpatched, affecting this product allowing you to take the necessary precautions.

If you have information about a new or an existing vulnerability in Ruby 1.8.x then you are more than welcome to contact us.

1. Product Summary Only

2. Secunia Advisory Statistics (All time)

2.1. Statistics for 2013

2.2. Statistics for 2012

2.3. Statistics for 2011

2.4. Statistics for 2010

2.5. Statistics for 2009

2.6. Statistics for 2008

2.7. Statistics for 2007

2.8. Statistics for 2006

2.9. Statistics for 2005

2.10. Statistics for 2004

2.11. Statistics for 2003

3. List of Secunia Advisories (All time)

3.1. List for 2013

3.2. List for 2012

3.3. List for 2011

3.4. List for 2010

3.5. List for 2009

3.6. List for 2008

3.7. List for 2007

3.8. List for 2006

3.9. List for 2005

3.10. List for 2004

3.11. List for 2003

4. Send Feedback

Vendor, Links, and Unpatched Vulnerabilities

Vendor	N/A

Product Link	View Here (Link to external site)

Affected By	19 Secunia advisories 33 Vulnerabilities

Monitor Product	Receive alerts for this product

Unpatched	0% (0 of 19 Secunia advisories)

Most Critical Unpatched There are no unpatched Secunia advisories affecting this product, when all vendor patches are applied..

19 Secunia Advisories in 2003-2013

Secunia has issued a total of 19 Secunia advisories in 2003-2013 for Ruby 1.8.x. Currently, 0% (0 out of 19) are marked as unpatched.

More information about the specific Secunia advisories affecting Ruby 1.8.x can be found below. Each Secunia advisory is enclosed by a box highlighted with a color representing its current patch status. You can read the complete Secunia advisories for thorough descriptions of the issues covered and for solution suggestions by clicking either the Secunia advisory title or the "Read More" links available for each Secunia advisory.

Ruby Web Form Hash Collision Denial of Service Vulnerability
Vendor Patch. Secunia Advisory 1 of 4 in 2011. 1,623 views.

Release Date:
2011-12-29

Secunia Advisory ID:
SA47405

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS

Where:
From remote

Short Description:
A vulnerability has been reported in Ruby, which can be exploited by malicious people to cause a DoS (Denial of Service). [Read More]

Ruby BigDecimal Integer Truncation Vulnerability
Vendor Workaround. Secunia Advisory 2 of 4 in 2011. 1,306 views.

Release Date:
2011-05-24

Secunia Advisory ID:
SA44638

Solution Status:
Vendor Workaround

Criticality:

Impact:
DoS
System access

Where:
From remote

Short Description:
A vulnerability has been reported in Ruby, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system. [Read More]

Ruby "#to_s" Safe Level Security Bypass Vulnerability
Vendor Workaround. Secunia Advisory 3 of 4 in 2011. 2,466 views.

Release Date:
2011-02-21

Secunia Advisory ID:
SA43420

Solution Status:
Vendor Workaround

Criticality:

Impact:
Security Bypass

Where:
From remote

Short Description:
A vulnerability has been reported in Ruby, which can be exploited by malicious people to bypass certain security restrictions. [Read More]

Ruby "FileUtils.remove_entry_secure" Race Condition Security Issue
Vendor Patch. Secunia Advisory 4 of 4 in 2011. 3,002 views.

Release Date:
2011-02-21

Secunia Advisory ID:
SA43434

Solution Status:
Vendor Patch

Criticality:

Impact:
Privilege escalation

Where:
Local system

Short Description:
A security issue has been reported in Ruby, which can be exploited by malicious, local users to perform certain actions with escalated privileges. [Read More]

Ruby WEBrick UTF-7 Error Message Cross-Site Scripting Vulnerability
Vendor Patch. Secunia Advisory 1 of 2 in 2010. 3,048 views.

Release Date:
2010-08-16

Secunia Advisory ID:
SA41003

Solution Status:
Vendor Patch

Criticality:

Impact:
Cross Site Scripting

Where:
From remote

Short Description:
A vulnerability has been reported in Ruby WEBrick, which can be exploited by malicious people to conduct cross-site scripting attacks. [Read More]

Ruby WEBrick Terminal Escape Sequences Weakness
Vendor Patch. Secunia Advisory 2 of 2 in 2010. 5,551 views.

Release Date:
2010-01-11

Secunia Advisory ID:
SA37949

Solution Status:
Vendor Patch

Criticality:

Impact:
Manipulation of data

Where:
From remote

Short Description:
A weakness has been reported in Ruby, which can be exploited by malicious people to manipulate certain data. [Read More]

Ruby BigDecimal Denial of Service Vulnerability
Vendor Patch. Secunia Advisory 1 of 2 in 2009. 4,515 views.

Release Date:
2009-06-10

Secunia Advisory ID:
SA35399

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS

Where:
From remote

Short Description:
A vulnerability has been reported in Ruby, which can be exploited by malicious people to cause a DoS (Denial of Service). [Read More]

Ruby "OCSP_basic_verify()" Certificate Validation Vulnerability
Vendor Workaround. Secunia Advisory 2 of 2 in 2009. 3,997 views.

Release Date:
2009-02-19

Secunia Advisory ID:
SA33750

Solution Status:
Vendor Workaround

Criticality:

Impact:
Spoofing

Where:
From remote

Short Description:
A vulnerability has been reported in Ruby, which can be exploited by malicious people to conduct spoofing attacks. [Read More]

Ruby REXML Denial of Service Vulnerability
Vendor Workaround. Secunia Advisory 1 of 5 in 2008. 6,240 views.

Release Date:
2008-08-25

Secunia Advisory ID:
SA31602

Solution Status:
Vendor Workaround

Criticality:

Impact:
DoS

Where:
From remote

Short Description:
A vulnerability has been reported in Ruby, which can be exploited by malicious people to cause a DoS (Denial of Service). [Read More]

Ruby Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 2 of 5 in 2008. 7,590 views.

Release Date:
2008-08-11

Secunia Advisory ID:
SA31430

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass
Spoofing
DoS

Where:
From remote

Short Description:
Some vulnerabilities have been reported in Ruby, which can be exploited by malicious people to bypass certain security restrictions, cause a DoS (Denial of Service), and conduct spoofing attacks. [Read More]

Ruby "rb_ary_fill()" Denial of Service Vulnerability
Vendor Workaround. Secunia Advisory 3 of 5 in 2008. 8,041 views.

Release Date:
2008-07-02

Secunia Advisory ID:
SA30924

Solution Status:
Vendor Workaround

Criticality:

Impact:
DoS

Where:
From remote

Short Description:
Vincenzo "snagg" Iozzo has reported a vulnerability in Ruby, which can be exploited by malicious people to cause a DoS (Denial of Service). [Read More]

Ruby Multiple Vulnerabilities
Vendor Patch. Secunia Advisory 4 of 5 in 2008. 8,904 views.

Release Date:
2008-04-16

Secunia Advisory ID:
SA29794

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of system information
Exposure of sensitive information
DoS
System access

Where:
From remote

Short Description:
Some vulnerabilities have been reported in Ruby, which can be exploited by malicious people to disclose sensitive information, cause a DoS (Denial of Service), or potentially compromise a vulnerable system. [Read More]

Ruby WEBrick Information Disclosure Vulnerabilities
Vendor Patch. Secunia Advisory 5 of 5 in 2008. 7,832 views.

Release Date:
2008-03-06

Secunia Advisory ID:
SA29232

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of system information
Exposure of sensitive information

Where:
From remote

Short Description:
Some vulnerabilities have been reported in Ruby, which can be exploited by malicious people to disclose sensitive information. [Read More]

Ruby Modules Common Name Verification Security Issues
Vendor Workaround. Secunia Advisory 1 of 1 in 2007. 13,144 views.

Release Date:
2007-10-02

Secunia Advisory ID:
SA26985

Solution Status:
Vendor Workaround

Criticality:

Impact:
Spoofing

Where:
From remote

Short Description:
Some security issues have been reported in Ruby, which can be exploited by malicious people to conduct spoofing attacks. [Read More]

Ruby Safe Level Security Bypass Vulnerabilities
Vendor Patch. Secunia Advisory 1 of 1 in 2006. 15,552 views.

Release Date:
2006-07-12

Secunia Advisory ID:
SA21009

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass

Where:
From remote

Short Description:
Two vulnerabilities have been reported in Ruby, which can be exploited by malicious people to bypass certain security restrictions. [Read More]

Ruby Safe-Level Security Bypass and Server Classes Denial of Service
Vendor Patch. Secunia Advisory 1 of 2 in 2005. 16,020 views.

Release Date:
2005-09-23

Secunia Advisory ID:
SA16904

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS
Security Bypass

Where:
From remote

Short Description:
Two vulnerabilities have been reported in Ruby, which can be exploited by malicious people to bypass certain security restrictions, and to cause a DoS (Denial of Service). [Read More]

Ruby XMLRPC.iPIMethods Arbitrary Command Execution
Vendor Patch. Secunia Advisory 2 of 2 in 2005. 14,601 views.

Release Date:
2005-06-22

Secunia Advisory ID:
SA15767

Solution Status:
Vendor Patch

Criticality:

Impact:
Security Bypass

Where:
From remote

Short Description:
Nobuhiro IMAI has reported a vulnerability in Ruby, which can be exploited by malicious people to bypass certain security restrictions. [Read More]

Ruby "cgi.rb" Denial of Service Vulnerability
Vendor Patch. Secunia Advisory 1 of 2 in 2004. 15,422 views.

Release Date:
2004-11-08

Secunia Advisory ID:
SA13123

Solution Status:
Vendor Patch

Criticality:

Impact:
DoS

Where:
From remote

Short Description:
Two vulnerabilities have been reported in Ruby, which can be exploited by malicious people to cause a DoS (Denial of Service). [Read More]

Ruby CGI Session Management Insecure File Creation Vulnerability
Vendor Patch. Secunia Advisory 2 of 2 in 2004. 14,732 views.

Release Date:
2004-08-16

Secunia Advisory ID:
SA12290

Solution Status:
Vendor Patch

Criticality:

Impact:
Exposure of sensitive information

Where:
Local system

Short Description:
Andres Salomon has reported a vulnerability in Ruby, which potentially can be exploited by malicious, local users to gain knowledge of sensitive information. [Read More]

Discuss this Product

A new thread in our forum is automatically created for each Product. Activate the thread by commenting/discussing below.

Subject: Ruby 1.8.x

No posts yet

Vulnerability Report: Ruby 1.8.x

Table of Contents

Vendor, Links, and Unpatched Vulnerabilities

19 Secunia Advisories in 2003-2013

Discuss this Product

You must be logged in to post a comment.

Vulnerability Report: Ruby 1.8.x

Table of Contents

Vendor, Links, and Unpatched Vulnerabilities

19 Secunia Advisories in 2003-2013

Discuss this Product

You must be logged in to post a comment.

Secunia Customer Login

Not a customer already?