CVE-2005-1992

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

6.57%

Published

Jun 20, 2005

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands.

Affected Products (1)

yukihiro_matsumoto · rubyvulnerable

References (20)

http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-core/5237

Patch

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=315064

http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html

http://secunia.com/advisories/16920/

http://www.auscert.org.au/5509

http://www.ciac.org/ciac/bulletins/p-312.shtml

http://www.debian.org/security/2005/dsa-748

http://www.kb.cert.org/vuls/id/684913

US Government Resource

http://www.novell.com/linux/security/advisories/2005_18_sr.html

http://www.redhat.com/support/errata/RHSA-2005-543.html

http://www.securityfocus.com/bid/14016

http://www2.ruby-lang.org/en/20050701.html

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10819