Back to search
CVE-2004-0755
Published: Aug 19, 2004
Modified: Aug 8, 2024
PUBLISHED
Description
The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
oval:org.mitre.oval:def:11128
vdb-entry
signature
x_refsource_OVAL
DSA-537
vendor-advisory
x_refsource_DEBIAN
MDKSA-2004:128
vendor-advisory
x_refsource_MANDRAKE
GLSA-200409-08
vendor-advisory
x_refsource_GENTOO
12290
third-party-advisory
x_refsource_SECUNIA
ruby-filestore-pstore-insecure-permission(16996)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now