Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5
    allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the
    routing code, which leads to a denial of service (application hang) or "data loss," a different
    vulnerability than CVE-2006-4111. (CVE-2006-4112)

The remote host is affected by the vulnerability described in GLSA-200608-20 (Ruby on Rails: Several vulnerabilities)

    The Ruby on Rails developers have corrected some weaknesses in     action_controller/, relative to the handling of the user input and the     LOAD_PATH variable. A remote attacker could inject arbitrary entries     into the LOAD_PATH variable and alter the main Ruby on Rails process.
    The security hole has only been partly solved in version 1.1.5. Version     1.1.6 now fully corrects it.
  Impact :

    A remote attacker that would exploit these weaknesses might cause a     Denial of Service of the web framework and maybe inject arbitrary Ruby     scripts.
  Workaround :

    There is no known workaround at this time.

The remote web server appears to be using a version of Ruby on Rails, an open source web framework, that has a flaw in its routing code that can lead to the evaluation of Ruby code through the URL. Successful exploitation of this issue can result in a denial of service or even data loss.

ID	Name	Product	Family	Type	Severity
423251	SCA: security update for rails (GHSA-9wrq-xvmp-xjc8)	Tenable Cloud Security	SCA Checks	Local	high
423251	SCA: security update for rails (GHSA-9wrq-xvmp-xjc8)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
22242	GLSA-200608-20 : Ruby on Rails: Several vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
22204	Ruby on Rails Routing Code URL Code Evaluation DoS	Nessus	CGI abuses	Remote	high

Detections

Analytics

CVE-2006-4112

high

Tenable Plugins

high

high

high

high