CVE-2004-0755 - CVE House
Back to Database
Status published Low CVE-2004-0755

The FileStore capability in CGI::Session for Ruby before 1.8.1, and...

Vulnerability Description

The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-0755

Credits & Attribution

No credits recorded in the NVD database.

References

More from yukihiro matsumoto

View All →
CVE-2006-6303
The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does...
Medium 5
CVE-2006-5467
The cgi.rb CGI library for Ruby 1.8 allows remote attackers...
Medium 5
CVE-2006-3694
Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers...
Medium 6.4
CVE-2006-1931
The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets,...
Medium 5
CVE-2005-2337
Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and...
High 7.5

Affected Vendor

yukihiro matsumoto

View all reports →

Affected Software

ruby
Vulnerable Versions:
1.6, 1.8

Timeline

Official Publish: August 19th, 2004
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.