CVE-2006-3694

Published: Jul 21, 2006Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".

Affected (3)

Products: Yukihiro Matsumoto: Ruby

Yukihiro Matsumoto

1 product

Ruby

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Yukihiro Matsumoto Ruby	Version 1.8.2
Yukihiro Matsumoto Ruby	Version 1.8.3
Yukihiro Matsumoto Ruby	Version 1.8.4

References (50)

ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P (unsafe URL)

Source: cve@mitre.org

http://jvn.jp/jp/JVN%2313947696/index.html

Source: cve@mitre.org

http://jvn.jp/jp/JVN%2383768862/index.html

Source: cve@mitre.org

http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003907.html

Source: cve@mitre.org

http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003915.html

Source: cve@mitre.org

http://secunia.com/advisories/21009

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/21233

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/21236

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/21272

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/21337

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/21598

Source: cve@mitre.org

http://secunia.com/advisories/21657

Source: cve@mitre.org

http://secunia.com/advisories/21749

Source: cve@mitre.org

http://www.debian.org/security/2006/dsa-1139

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2006/dsa-1157

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2006:134

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2006_21_sr.html

Source: cve@mitre.org

http://www.osvdb.org/27144

Source: cve@mitre.org

http://www.osvdb.org/27145

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2006-0604.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/18944

Source: cve@mitre.org

Patch

http://www.ubuntu.com/usn/usn-325-1

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/2760

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27725

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9983

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P (unsafe URL)