EDB-32222

functional

Ruby 1.9 - 'WEBrick::HTTP::DefaultFileHandler' Crafted HTTP Request Denial of Service

view exploit source exploit_dbverifiedtype dosauthor Keita Yamaguchipublished 2008-08-11catalog exploit_db
01

exploited CVEs (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2008-4310UShigh7.8Exploit
httputils.rb in WEBrick in Ruby 1.8.1 and 1.8.5, as used in Red Hat Enterprise Linux 4 and 5, allows remote attackers to cause a denial of service (CPU consumption) via a crafted H…
CVE-2008-3656UShigh7.8Exploit
Algorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in WEBrick::HTTP::DefaultFileHandler in WEBrick in Ruby 1.8.5 and earlier, 1.8.6 through…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan