CVE-2005-1992

Publication date 20 June 2005

Last updated 17 July 2025


Ubuntu priority

Description

The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands.

Status

Package Ubuntu Release Status
ruby1.8 7.04 feisty
Fixed in 1.8.5-4ubuntu2
6.10 edgy
Fixed in 1.8.4-5ubuntu1.2
6.06 LTS dapper
Fixed in 1.8.4-1ubuntu1.3
ruby1.9 7.04 feisty
Fixed in 1.9.0+20060423-3ubuntu1
6.10 edgy
Fixed in 1.9.0+20060423-3ubuntu1
6.06 LTS dapper
Fixed in 1.9.0+20060423-3ubuntu1

References

Related Ubuntu Security Notices (USN)

Other references


Access our resources on patching vulnerabilities