FKIE_CVE-2008-3656

Vulnerability from fkie_nvd - Published: 2008-08-13 01:41 - Updated: 2026-06-16 22:56
Severity
Summary
Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFileHandler in WEBrick in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted HTTP request that is processed by a backtracking regular expression.
References
cve@mitre.orghttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401
cve@mitre.orghttp://lists.apple.com/archives/security-announce/2009/May/msg00002.html
cve@mitre.orghttp://secunia.com/advisories/31430
cve@mitre.orghttp://secunia.com/advisories/31697
cve@mitre.orghttp://secunia.com/advisories/32165
cve@mitre.orghttp://secunia.com/advisories/32219
cve@mitre.orghttp://secunia.com/advisories/32255
cve@mitre.orghttp://secunia.com/advisories/32256
cve@mitre.orghttp://secunia.com/advisories/32371
cve@mitre.orghttp://secunia.com/advisories/33178
cve@mitre.orghttp://secunia.com/advisories/35074
cve@mitre.orghttp://security.gentoo.org/glsa/glsa-200812-17.xml
cve@mitre.orghttp://support.apple.com/kb/HT3549
cve@mitre.orghttp://support.avaya.com/elmodocs2/security/ASA-2008-424.htm
cve@mitre.orghttp://wiki.rpath.com/wiki/Advisories:rPSA-2008-0264
cve@mitre.orghttp://www.debian.org/security/2008/dsa-1651
cve@mitre.orghttp://www.debian.org/security/2008/dsa-1652
cve@mitre.orghttp://www.redhat.com/support/errata/RHSA-2008-0897.html
cve@mitre.orghttp://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/Exploit
cve@mitre.orghttp://www.securityfocus.com/archive/1/495884/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/30644
cve@mitre.orghttp://www.securitytracker.com/id?1020654
cve@mitre.orghttp://www.us-cert.gov/cas/techalerts/TA09-133A.htmlUS Government Resource
cve@mitre.orghttp://www.vupen.com/english/advisories/2008/2334
cve@mitre.orghttp://www.vupen.com/english/advisories/2009/1297
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/44371
cve@mitre.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9682
cve@mitre.orghttps://usn.ubuntu.com/651-1/
cve@mitre.orghttps://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html
cve@mitre.orghttps://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html
af854a3a-2127-422b-91ae-364da2661108http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401
af854a3a-2127-422b-91ae-364da2661108http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/31430
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/31697
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/32165
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/32219
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/32255
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/32256
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/32371
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/33178
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/35074
af854a3a-2127-422b-91ae-364da2661108http://security.gentoo.org/glsa/glsa-200812-17.xml
af854a3a-2127-422b-91ae-364da2661108http://support.apple.com/kb/HT3549
af854a3a-2127-422b-91ae-364da2661108http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm
af854a3a-2127-422b-91ae-364da2661108http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0264
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2008/dsa-1651
af854a3a-2127-422b-91ae-364da2661108http://www.debian.org/security/2008/dsa-1652
af854a3a-2127-422b-91ae-364da2661108http://www.redhat.com/support/errata/RHSA-2008-0897.html
af854a3a-2127-422b-91ae-364da2661108http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/Exploit
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/495884/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/30644
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1020654
af854a3a-2127-422b-91ae-364da2661108http://www.us-cert.gov/cas/techalerts/TA09-133A.htmlUS Government Resource
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2008/2334
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2009/1297
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/44371
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9682
af854a3a-2127-422b-91ae-364da2661108https://usn.ubuntu.com/651-1/
af854a3a-2127-422b-91ae-364da2661108https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html
af854a3a-2127-422b-91ae-364da2661108https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html
Impacted products
Vendor Product Version
ruby-lang ruby *
ruby-lang ruby 1.6.8
ruby-lang ruby 1.8.0
ruby-lang ruby 1.8.1
ruby-lang ruby 1.8.1
ruby-lang ruby 1.8.2
ruby-lang ruby 1.8.2
ruby-lang ruby 1.8.2
ruby-lang ruby 1.8.2
ruby-lang ruby 1.8.3
ruby-lang ruby 1.8.3
ruby-lang ruby 1.8.3
ruby-lang ruby 1.8.3
ruby-lang ruby 1.8.4
ruby-lang ruby 1.8.4
ruby-lang ruby 1.8.4
ruby-lang ruby 1.8.4
ruby-lang ruby 1.8.5
ruby-lang ruby 1.8.5
ruby-lang ruby 1.8.5
ruby-lang ruby 1.8.5
ruby-lang ruby 1.8.5
ruby-lang ruby 1.8.5
ruby-lang ruby 1.8.5
ruby-lang ruby 1.8.5
ruby-lang ruby 1.8.5
ruby-lang ruby 1.8.5
ruby-lang ruby 1.8.5
ruby-lang ruby 1.8.6
ruby-lang ruby 1.8.6
ruby-lang ruby 1.8.6
ruby-lang ruby 1.8.6
ruby-lang ruby 1.8.6
ruby-lang ruby 1.8.6
ruby-lang ruby 1.8.7
ruby-lang ruby 1.8.7
ruby-lang ruby 1.8.7
ruby-lang ruby 1.8.7
ruby-lang ruby 1.8.7
ruby-lang ruby 1.8.7
ruby-lang ruby 1.8.7
ruby-lang ruby 1.8.7
ruby-lang ruby 1.9.0
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9721AB68-8002-4F85-98BC-0E6FDF7CDF6C",
              "versionEndIncluding": "1.8.5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.6.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "46086C6A-9068-4959-BEE7-4D76BDEA3962",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "16BDFA5C-35BE-4B7E-BD2D-C28B095F62E0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "31160797-6920-4BA1-B355-1CCD1FCDBFC8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.1:-9:*:*:*:*:*:*",
              "matchCriteriaId": "BC306E85-66D8-4384-BBC3-92DC99C85FC2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5675C37-39EF-41EF-9A53-3FCE4CF23820",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.2:preview2:*:*:*:*:*:*",
              "matchCriteriaId": "39609530-0A81-481E-BDA4-5A98327EAD11",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.2:preview3:*:*:*:*:*:*",
              "matchCriteriaId": "C19ADE91-4D9E-43ED-A605-E504B9090119",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.2:preview4:*:*:*:*:*:*",
              "matchCriteriaId": "D89E3027-C2ED-4CC6-86F5-1B791576B6EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "46F29ADA-E6DC-456F-9E63-C56C68EF7E5C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.3:preview1:*:*:*:*:*:*",
              "matchCriteriaId": "57B1C113-682E-4F7D-BCF0-E30C446C4AC7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.3:preview2:*:*:*:*:*:*",
              "matchCriteriaId": "4BAF9471-B532-4194-AB3C-5AA28432FF27",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.3:preview3:*:*:*:*:*:*",
              "matchCriteriaId": "51BE9728-A5FE-486A-8DB9-711E46243132",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "7AC1B910-C0FA-4943-92B1-597842E84015",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.4:preview1:*:*:*:*:*:*",
              "matchCriteriaId": "A78ECCA9-6F07-4A63-8BF7-8D40F2439552",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.4:preview2:*:*:*:*:*:*",
              "matchCriteriaId": "14513719-4ED8-4EAB-B4D8-29849B868BA0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.4:preview3:*:*:*:*:*:*",
              "matchCriteriaId": "92E3814D-BEEA-4E46-9CED-9D8059727D14",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.5:p11:*:*:*:*:*:*",
              "matchCriteriaId": "CA7D3F32-EFB7-4628-9328-36C6A306B399",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.5:p113:*:*:*:*:*:*",
              "matchCriteriaId": "D1A95E9F-AEC5-4AF9-B7D9-52DDDECB7E77",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.5:p115:*:*:*:*:*:*",
              "matchCriteriaId": "9328DE73-420B-4280-85A4-ABEFC4679676",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.5:p12:*:*:*:*:*:*",
              "matchCriteriaId": "0F382FBD-6163-4A5B-AEB3-A15A843329F1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.5:p2:*:*:*:*:*:*",
              "matchCriteriaId": "4399121F-9BC7-4A67-8B0B-ED3B94A16D56",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.5:p35:*:*:*:*:*:*",
              "matchCriteriaId": "BFE61EB9-2544-4E48-B313-63A99F4F5241",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.5:preview1:*:*:*:*:*:*",
              "matchCriteriaId": "6122187F-2371-429A-971B-419B4ACE8E18",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.5:preview2:*:*:*:*:*:*",
              "matchCriteriaId": "8A42425D-FF21-4863-B43D-EE100DBE6BD7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.5:preview3:*:*:*:*:*:*",
              "matchCriteriaId": "06512108-020D-4D71-8F60-6AA2052D7D35",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.5:preview4:*:*:*:*:*:*",
              "matchCriteriaId": "E2E152A5-F625-4061-AD8C-4CFA085B674F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.5:preview5:*:*:*:*:*:*",
              "matchCriteriaId": "756F5247-658C-412C-ACBF-CBE987DF748A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "876B2575-4F81-4A70-9A88-9BEE44649626",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.6:p110:*:*:*:*:*:*",
              "matchCriteriaId": "DF02372D-FD0B-453F-821E-1E0BA7900711",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.6:p114:*:*:*:*:*:*",
              "matchCriteriaId": "ACC0DB90-C072-4BCB-9082-94394F547D35",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.6:preview1:*:*:*:*:*:*",
              "matchCriteriaId": "04579340-B53F-47B5-99C9-B647AAA3D303",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.6:preview2:*:*:*:*:*:*",
              "matchCriteriaId": "9D7F4162-108A-470B-8E6B-C009E8C56AEF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.6:preview3:*:*:*:*:*:*",
              "matchCriteriaId": "73AB0545-3D8D-4623-8381-D71DA44E3B5D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D86FC99-3521-4E22-8FD3-65CEB05A6342",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7:p17:*:*:*:*:*:*",
              "matchCriteriaId": "84A291B0-EABD-4572-B8E2-2457DBAEDC92",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7:p22:*:*:*:*:*:*",
              "matchCriteriaId": "1FE05F3A-A8B5-45EE-BF52-D55E2768F890",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7:p71:*:*:*:*:*:*",
              "matchCriteriaId": "0C6D66E2-3E10-4DEA-9E6B-53A5DE78AFCF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7:preview1:*:*:*:*:*:*",
              "matchCriteriaId": "4E37786B-5336-4182-A1E3-801BDB6F61EC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7:preview2:*:*:*:*:*:*",
              "matchCriteriaId": "349D014E-223A-46A7-8334-543DB330C215",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7:preview3:*:*:*:*:*:*",
              "matchCriteriaId": "550EC183-43A1-4A63-A23C-A48C1F078451",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.8.7:preview4:*:*:*:*:*:*",
              "matchCriteriaId": "0ACECF59-AA88-4B5C-A671-83842C9CF072",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ruby-lang:ruby:1.9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "52179EC7-CAF0-42AA-A21A-7105E10CA122",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFileHandler in WEBrick in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows context-dependent attackers to cause a denial of service (CPU consumption) via a crafted HTTP request that is processed by a backtracking regular expression."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de complejidad algor\u00edtmica en la funci\u00f3n WEBrick::HTTPUtils.split_header_value en WEBrick::HTTP::DefaultFileHandler en WEBrick en Ruby versiones 1.8.5 y anteriores, versiones 1.8.6 hasta 1.8.6-p286, versiones 1.8.7 hasta 1.8.7-p71, y versiones 1.9 hasta r18423, permite a los atacantes dependiendo del contexto causar una denegaci\u00f3n de servicio (consumo de CPU) por medio de una petici\u00f3n HTTP dise\u00f1ada que se procesa mediante una expresi\u00f3n regular backtracking."
    }
  ],
  "id": "CVE-2008-3656",
  "lastModified": "2026-06-16T22:56:14.747",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": true,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.8,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2008-08-13T01:41:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/31430"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/31697"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/32165"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/32219"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/32255"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/32256"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/32371"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/33178"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/35074"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://security.gentoo.org/glsa/glsa-200812-17.xml"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://support.apple.com/kb/HT3549"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0264"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2008/dsa-1651"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.debian.org/security/2008/dsa-1652"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0897.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/495884/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/30644"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securitytracker.com/id?1020654"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.us-cert.gov/cas/techalerts/TA09-133A.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2008/2334"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2009/1297"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44371"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9682"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://usn.ubuntu.com/651-1/"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=494401"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://lists.apple.com/archives/security-announce/2009/May/msg00002.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/31430"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/31697"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/32165"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/32219"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/32255"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/32256"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/32371"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/33178"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/35074"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://security.gentoo.org/glsa/glsa-200812-17.xml"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.apple.com/kb/HT3549"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-424.htm"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0264"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2008/dsa-1651"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.debian.org/security/2008/dsa-1652"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.redhat.com/support/errata/RHSA-2008-0897.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/495884/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/30644"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securitytracker.com/id?1020654"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.us-cert.gov/cas/techalerts/TA09-133A.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2008/2334"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2009/1297"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44371"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9682"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://usn.ubuntu.com/651-1/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00259.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00299.html"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.