Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass "safe level" checks via unspecified vectors involving (1) the alias function and (2) "directory operations".
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade ruby_staticUpgrade ruby | Dec 10, 2025 | Jul 29, 2006 |
| Suse | — | Upgrade ruby-doc-htmlUpgrade ruby-tkUpgrade rubyUpgrade ruby-examplesUpgrade ruby-develUpgrade ruby-doc-riUpgrade ruby-test-suite | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade ruby1.8Upgrade libruby1.8 | Nov 8, 2024 | Jul 21, 2006 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub