CVE-2005-1992: yukihiro_matsumoto ruby

EPSS trend

Probability

6.57%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 6.57% on 20-09-2026

20-09-202620-10-2026

EPSS score

6.57%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

21 links

www.debian.org/security/2005/dsa-748Vendor AdvisoryX Refsource DEBIAN
www.novell.com/linux/security/advisories/2005_18_sr.htmlVendor AdvisoryX Refsource SUSE
bugs.debian.org/cgi-bin/bugreport.cgi?bug=315064X Refsource CONFIRM
www.kb.cert.org/vuls/id/684913Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.redhat.com/support/errata/RHSA-2005-543.htmlVendor AdvisoryX Refsource REDHAT
www.ciac.org/ciac/bulletins/p-312.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIAC
www.securityfocus.com/bid/14016VDB EntryX Refsource BID
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10819VDB EntrySignatureX Refsource OVAL
www2.ruby-lang.org/en/20050701.htmlX Refsource CONFIRM
blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-core/5237X Refsource CONFIRMPatch

Show all 21 references

www.auscert.org.au/5509Third Party AdvisoryX Refsource AUSCERT
lists.apple.com/archives/security-announce/2005/Sep/msg00002.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/16920/Third Party AdvisoryX Refsource SECUNIA
access.redhat.com/errata/RHSA-2005:543Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=161095REPORT
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_543.jsonAdvisory
access.redhat.com/security/cve/CVE-2005-1992REPORT
bugzilla.redhat.com/show_bug.cgi?id=1617679REPORT
www.cve.org/CVERecord?id=CVE-2005-1992Advisory
nvd.nist.gov/vuln/detail/CVE-2005-1992Advisory

Related vulnerabilities

CVE-2005-2337debianruby+113.26%21y ago07-10-2005 04:00Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when Ruby processes a program through standard input (stdin).CVE-2004-0755debianruby+90.36%22y ago19-08-2004 04:00The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.CVE-2004-0983debianruby+121.90%21y ago19-11-2004 05:00The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.CVE-2006-1931redhatirb+810.43%20y ago20-04-2006 21:00The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.CVE-2006-5467debianruby1.6+104.52%19y ago27-10-2006 18:00The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and contains an inconsistent ID.CVE-2006-6303yukihiro_matsumotoruby3.80%19y ago06-12-2006 19:00The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.

All vulnerabilities inruby

CVE-2005-1992: yukihiro_matsumoto ruby

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References