Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Ruby Improper Authentication Vulnerability - CVE-2008-3905 - Vulnerability Database
Ruby

Ruby Improper Authentication Vulnerability - CVE-2008-3905

Medium
Reference: CVE-2008-3905
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-3905
Title: Ruby Improper Authentication Vulnerability
Overview:

resolv.rb in Ruby 1.8.5 and earlier 1.8.6 before 1.8.6-p287 1.8.7 before 1.8.7-p72 and 1.9 r18423 and earlier uses sequential transaction IDs and constant source ports for DNS requests which makes it easier for remote attackers to spoof DNS responses a different vulnerability than CVE-2008-1447.