Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2006-6303

The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.

  • Published: Dec 6, 2006
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-6303
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
yukihiro_matsumoto / ruby 1.8.4 1.8.4.x
yukihiro_matsumoto / ruby 1.8.3 1.8.3.x
yukihiro_matsumoto / ruby 1.8.1 1.8.1.x
yukihiro_matsumoto / ruby 1.8.5 1.8.5.x
yukihiro_matsumoto / ruby 1.8.2 1.8.2.x
yukihiro_matsumoto / ruby 1.8.2_pre2 1.8.2_pre2.x
yukihiro_matsumoto / ruby 1.8 1.8.x
yukihiro_matsumoto / ruby 1.8.2_pre1 1.8.2_pre1.x