CVE-2006-3694

security flaw

Published Jul 19, 2006 CVSS 2.0 · 6.4 Medium EPSS 5.8% KEV · Not listed
Description
Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1139-1 New ruby1.6 packages fix privilege escalation
Debian DSA Debian DSA DSA-1157-1 New ruby1.8 packages fix several vulnerabilities
EUVD EUVD EUVD-2006-3689 Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".
Ubuntu USN Ubuntu USN USN-325-1 ruby1.8 vulnerability
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 6:39 PM
Reserved
Jul 18, 2006, 12:00 AM
Status
Modified
Published
Jul 21, 2006, 2:03 PM
Modified
Jun 16, 2026, 10:27 PM
Severity
Moderate
Public date
Jul 11, 2006, 12:00 AM