1. Home
  2. Vulnerabilities
  3. CVE-2005-1992

CVE-2005-1992

CVSS v2.0 7.5 (High)
75% Progress
EPSS 3.59 % (92th)
3.59% Progress
Affected Products 1
Advisories 4
Info CVSS EPSS Affected Configurations References Security Advisories Packages & Software Tools, Exploits & PoC Graph Web & Social Timeline

The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands.

Weaknesses
CWE-NVD-Other
CVE Status
PUBLISHED
CNA
Red Hat, Inc.
Published Date
2005-06-20 04:00:00
(19 years ago)
Updated Date
2017-10-11 01:30:12
(7 years ago)

Affected Products

Yukihiro Matsumoto

Configuration #1

    CPE23 From Up To
  Yukihiro Matsumoto Ruby 1.8 cpe:2.3:a:yukihiro_matsumoto:ruby:1.8