NetSight
medium5.0Public exploit code

CVE-2006-1931

The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.

Affected products

VendorProductAffected versions
Yukihiro MatsumotoRuby
Versions 1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5

References