Total vulnerabilities in the database
Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly restrict access to critical variables and methods at various safe levels, which allows context-dependent attackers to bypass intended access restrictions via (1) untrace_var, (2) $PROGRAM_NAME, and (3) syslog at safe level 4, and (4) insecure methods at safe levels 1 through 3.
| Software | From | Fixed in |
|---|---|---|
| ruby-lang / ruby | 1.8.3-preview1 | 1.8.3-preview1.x |
| ruby-lang / ruby | 1.8.2-preview4 | 1.8.2-preview4.x |
| ruby-lang / ruby | 1.8.4-preview2 | 1.8.4-preview2.x |
| ruby-lang / ruby | 1.8.1--9 | 1.8.1--9.x |
| ruby-lang / ruby | 1.8.7-preview3 | 1.8.7-preview3.x |
| ruby-lang / ruby | 1.8.7-p17 | 1.8.7-p17.x |
| ruby-lang / ruby | 1.9.0 | 1.9.0.x |
| ruby-lang / ruby | 1.8.2-preview3 | 1.8.2-preview3.x |
| ruby-lang / ruby | 1.8.6-p110 | 1.8.6-p110.x |
| ruby-lang / ruby | 1.8.6-p230 | 1.8.6-p230.x |
| ruby-lang / ruby | 1.8.5-p2 | 1.8.5-p2.x |
| ruby-lang / ruby | 1.8.5-preview5 | 1.8.5-preview5.x |
| ruby-lang / ruby | 1.8.5-p12 | 1.8.5-p12.x |
| ruby-lang / ruby | 1.8.5-preview1 | 1.8.5-preview1.x |
| ruby-lang / ruby | 1.8.7-p71 | 1.8.7-p71.x |
| ruby-lang / ruby | 1.8.4-preview1 | 1.8.4-preview1.x |
| ruby-lang / ruby | 1.8.7-p22 | 1.8.7-p22.x |
| ruby-lang / ruby | 1.8.4 | 1.8.4.x |
| ruby-lang / ruby | 1.8.6-p286 | 1.8.6-p286.x |
| ruby-lang / ruby | 1.8.3 | 1.8.3.x |
| ruby-lang / ruby | - | 1.8.5.x |
| ruby-lang / ruby | 1.8.3-preview2 | 1.8.3-preview2.x |
| ruby-lang / ruby | 1.8.2 | 1.8.2.x |
| ruby-lang / ruby | 1.8.4-preview3 | 1.8.4-preview3.x |
| ruby-lang / ruby | 1.8.7-preview2 | 1.8.7-preview2.x |
| ruby-lang / ruby | 1.8.1 | 1.8.1.x |
| ruby-lang / ruby | 1.8.2-preview2 | 1.8.2-preview2.x |
| ruby-lang / ruby | 1.8.6-p36 | 1.8.6-p36.x |
| ruby-lang / ruby | 1.8.3-preview3 | 1.8.3-preview3.x |
| ruby-lang / ruby | 1.8.6-preview1 | 1.8.6-preview1.x |
| ruby-lang / ruby | 1.8.6-p114 | 1.8.6-p114.x |
| ruby-lang / ruby | 1.8.5-preview4 | 1.8.5-preview4.x |
| ruby-lang / ruby | 1.8.5-preview2 | 1.8.5-preview2.x |
| ruby-lang / ruby | 1.8.6-preview3 | 1.8.6-preview3.x |
| ruby-lang / ruby | 1.8.0 | 1.8.0.x |
| ruby-lang / ruby | 1.8.5-p11 | 1.8.5-p11.x |
| ruby-lang / ruby | 1.8.7 | 1.8.7.x |
| ruby-lang / ruby | 1.8.6-p111 | 1.8.6-p111.x |
| ruby-lang / ruby | 1.6.8 | 1.6.8.x |
| ruby-lang / ruby | 1.8.6-preview2 | 1.8.6-preview2.x |
| ruby-lang / ruby | 1.8.5-p35 | 1.8.5-p35.x |
| ruby-lang / ruby | 1.8.5-p113 | 1.8.5-p113.x |
| ruby-lang / ruby | 1.8.5-p115 | 1.8.5-p115.x |
| ruby-lang / ruby | 1.8.7-preview1 | 1.8.7-preview1.x |
| ruby-lang / ruby | 1.8.6 | 1.8.6.x |
| ruby-lang / ruby | 1.8.7-preview4 | 1.8.7-preview4.x |
| ruby-lang / ruby | 1.8.5-preview3 | 1.8.5-preview3.x |