CVE-2006-4112
Rails Denial of Service vulnerability
Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.
- Record
CVE-2006-4112- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.
- Record
CVE-2006-4112- Updated
- 2026-11-02
EUVDEUVD-2017-0210 No score
Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.
- Record
EUVD-2017-0210- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9wrq-xvmp-xjc8 No score
Rails Denial of Service vulnerability
Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.
- Record
GHSA-9wrq-xvmp-xjc8- Updated
- 2026-11-02
OSV No score
Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.
- Record
CVE-2006-4112- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-4112 No score
Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.
- Record
DEBIAN-CVE-2006-4112- Updated
- 2026-11-02
OSVGHSA-9wrq-xvmp-xjc8 No score
Rails Denial of Service vulnerability
Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.
- Record
GHSA-9wrq-xvmp-xjc8- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4112 is a high vulnerability (CVSS 7.5) in Rubyonrails Rails, published August 14, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.12%, the 87th percentile. Fixed in rails 1.1.6.
References
secunia.com/advisories/21466
securityfocus.com/bid/19454
weblog.rubyonrails.org/2006/8/10/rails-1-1-6-backports-and-full-disclosure
exchange.xforce.ibmcloud.com/vulnerabilities/28364
novell.com/linux/security/advisories/2006_21_sr.html
Show 13 moreShow less
gentoo.org/security/en/glsa/glsa-200608-20.xml
kb.cert.org/vuls/id/699540
securitytracker.com/id?1016673
nvd.nist.gov/vuln/detail/CVE-2006-4112
github.com/rubysec/ruby-advisory-db/blob/master/gems/rails/CVE-2006-4112.yml
web.archive.org/web/20200301174340/http://www.securityfocus.com/bid/19454
security-tracker.debian.org/tracker/CVE-2006-4112