• info
• discussion
• exploit
• solution
• references

Ruby on Rails Routing Denial of Service Vulnerability

Solution:
To address this issue, the vendor has released version 1.1.6 of Ruby on Rails as well as patches for previous versions.

Please see the references for more information and vendor advisories.


Ruby on Rails Ruby on Rails 1.1

• Ruby on Rails rel_1-1-0.diff
  http://www.rubyonrails.org/files/aug_10_security/rel_1-1-0.diff

Ruby on Rails Ruby on Rails 1.1.1

• Ruby on Rails rel_1-1-1.diff
  http://www.rubyonrails.org/files/aug_10_security/rel_1-1-1.diff

Ruby on Rails Ruby on Rails 1.1.2

• Ruby on Rails rel_1-1-2.diff
  http://www.rubyonrails.org/files/aug_10_security/rel_1-1-2.diff

Ruby on Rails Ruby on Rails 1.1.4

• Ruby on Rails rel_1-1-4.diff
  http://www.rubyonrails.org/files/aug_10_security/rel_1-1-4.diff

Ruby on Rails Ruby on Rails 1.1.5

• Ruby on Rails rails-1.1.6.tgz
  http://rubyforge.org/frs/download.php/12323/rails-1.1.6.tgz