Description
Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-1139-1 | New ruby1.6 packages fix privilege escalation |
Debian DSA |
DSA-1157-1 | New ruby1.8 packages fix several vulnerabilities |
EUVD |
EUVD-2006-3689 | Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations". |
Ubuntu USN |
USN-325-1 | ruby1.8 vulnerability |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T18:39:53.900Z
Reserved: 2006-07-18T00:00:00.000Z
Link: CVE-2006-3694
No data.
Status : Modified
Published: 2006-07-21T14:03:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2006-3694
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD
Ubuntu USN