CVE-2005-2337: yukihiro_matsumoto ruby

EPSS trend

Probability

3.26%

Chance of exploitation in the next 30 days

Percentile

88%

Versus all other CVEs

30-day change

0.00 pp

From 3.26% on 20-09-2026

20-09-202620-10-2026

EPSS score

3.26%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

36 links

www.securityfocus.com/bid/17951VDB EntryX Refsource BID
secunia.com/advisories/16904Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.vupen.com/english/advisories/2006/1779VDB EntryX Refsource VUPEN
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10564VDB EntrySignatureX Refsource OVAL
www.novell.com/linux/security/advisories/2006_05_sr.htmlVendor AdvisoryX Refsource SUSE
www.us-cert.gov/cas/techalerts/TA06-132A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
exchange.xforce.ibmcloud.com/vulnerabilities/22360VDB EntryX Refsource XF
jvn.jp/jp/JVN%2362914675/index.htmlX Refsource MISC
www.debian.org/security/2005/dsa-860Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/17098Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 36 references

secunia.com/advisories/17285Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.kb.cert.org/vuls/id/160012Third Party AdvisoryX Refsource CERT VNUS Government Resource
securityreason.com/securityalert/59Third Party AdvisoryX Refsource SREASON
www.debian.org/security/2005/dsa-864Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/17147Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.apple.com/archives/security-announce/2006/May/msg00003.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/19130Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/14909VDB EntryX Refsource BID
www.securitytracker.com/alerts/2005/Sep/1014948.htmlVDB EntryX Refsource SECTRACK
secunia.com/advisories/17129Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2005-799.htmlVendor AdvisoryX Refsource REDHAT
www.gentoo.org/security/en/glsa/glsa-200510-05.xmlVendor AdvisoryX Refsource GENTOO
www.mandriva.com/security/advisories?name=MDKSA-2005:191Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/20077Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntu.com/usn/usn-195-1Vendor AdvisoryX Refsource UBUNTU
www.ruby-lang.org/en/20051003.htmlX Refsource CONFIRMPatchVendor Advisory
secunia.com/advisories/17094Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2005/dsa-862Vendor AdvisoryX Refsource DEBIAN
access.redhat.com/errata/RHSA-2005:799Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=169575REPORT
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_799.jsonAdvisory
access.redhat.com/security/cve/CVE-2005-2337REPORT
bugzilla.redhat.com/show_bug.cgi?id=1617706REPORT
www.cve.org/CVERecord?id=CVE-2005-2337Advisory
nvd.nist.gov/vuln/detail/CVE-2005-2337Advisory

Related vulnerabilities

CVE-2005-1992debianruby1.8+96.57%21y ago20-06-2005 04:00The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands.CVE-2004-0755debianruby+90.36%22y ago19-08-2004 04:00The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.CVE-2004-0983debianruby+121.90%21y ago19-11-2004 05:00The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.CVE-2006-1931redhatirb+810.43%20y ago20-04-2006 21:00The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.CVE-2006-5467debianruby1.6+104.52%19y ago27-10-2006 18:00The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and contains an inconsistent ID.CVE-2006-6303yukihiro_matsumotoruby3.80%19y ago06-12-2006 19:00The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.

All vulnerabilities inruby

CVE-2005-2337: yukihiro_matsumoto ruby

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References