[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oss-security
Subject:    Re: [oss-security] CVE request: ruby information disclosure
From:       Tomas Hoger <thoger () redhat ! com>
Date:       2008-03-10 7:35:12
Message-ID: 20080310083512.3e5a9cc6 () redhat ! com
[Download RAW message or body]

On Sun, 09 Mar 2008 17:18:04 -0800 Jonathan Smith
<smithj@freethemallocs.com> wrote:

> Gentoo has an open bug [1] indicating a minor information disclosure
> issue in ruby. They also sortof indicate that there has been a CVE
> request, but I can't find it anywhere. So either consider this a
> request or a ping on an existing request :)
> 
> rPath also has an issue [2] if you need references.
> 
> [1]: https://bugs.gentoo.org/show_bug.cgi?id=212264
> [2]: https://issues.rpath.com/browse/RPL-2338

CVE-2008-1145

http://www.ruby-lang.org/en/news/2008/03/03/webrick-file-access-vulnerability/
for better reference.

Check NVD site [1], as CVE descriptions frequently appear there hours to
days earlier than on CVE site.

[1] http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-1145

-- 
Tomas Hoger
Red Hat Security Response Team
[prev in list] [next in list] [prev in thread] [next in thread]