What’s Vulnerable › Vulnerabilities

CVE-2006-1931

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2006-04-20 · updated 2026-06-16

Description

The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service (blocked connections) via a large amount of data.

Affected products

• Yukihiro Matsumoto Ruby: 1.6, 1.6.1, 1.6.2, 1.6.3, 1.6.4, 1.6.5 (+4)

References

• http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-dev/27787
• http://secunia.com/advisories/16904
• http://secunia.com/advisories/19772
• http://secunia.com/advisories/19804
• http://secunia.com/advisories/20024
• http://secunia.com/advisories/20064
• http://secunia.com/advisories/20457
• http://secunia.com/advisories/21657
• http://securitytracker.com/id?1015978
• http://www.debian.org/security/2006/dsa-1157

Get alerted when CVE-2006-1931 or the next vulnerability affects your stack