CVE-2004-0755
Publication date 20 October 2004
Last updated 17 July 2025
Ubuntu priority
Description
The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| ruby1.6 | ||
| ruby1.8 | ||