{"id":"CVE-2006-3694","aliases":["DEBIAN-CVE-2006-3694","DSA-1139-1","DSA-1157","EUVD-2006-3689","GHSA-rx2v-jmvm-3c4h","RHSA-2006:0604"],"status":"published","title":"Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass \"safe...","description":"Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass \"safe level\" checks via unspecified vectors involving (1) the alias function and (2) \"directory operations\".","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05846,"percentile":0.93227,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2006-07-19T01:00:00Z","modified":"2026-06-26T10:04:52Z","fixes":[{"ecosystem":"Debian:3.1","package":"ruby1.6","fixed_in":["1.6.8-12sarge2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"irb","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"ruby","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"ruby-debuginfo","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"ruby-devel","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"ruby-docs","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"ruby-libs","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"ruby-mode","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::as","package":"ruby-tcltk","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"irb","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ruby","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ruby-debuginfo","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ruby-devel","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ruby-docs","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ruby-libs","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ruby-mode","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ruby-tcltk","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"irb","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"ruby","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"ruby-debuginfo","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"ruby-devel","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"ruby-docs","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"ruby-libs","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"ruby-mode","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::es","package":"ruby-tcltk","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"irb","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ruby","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ruby-debuginfo","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ruby-devel","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ruby-docs","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ruby-libs","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ruby-mode","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ruby-tcltk","fixed_in":["0:1.6.8-9.EL3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"irb","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"ruby","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"ruby-debuginfo","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"ruby-devel","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"ruby-docs","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"ruby-libs","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"ruby-mode","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::as","package":"ruby-tcltk","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"irb","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ruby","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ruby-debuginfo","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ruby-devel","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ruby-docs","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ruby-libs","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ruby-mode","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ruby-tcltk","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"irb","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"ruby","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"ruby-debuginfo","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"ruby-devel","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"ruby-docs","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"ruby-libs","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"ruby-mode","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::es","package":"ruby-tcltk","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"irb","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ruby","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ruby-debuginfo","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ruby-devel","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ruby-docs","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ruby-libs","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ruby-mode","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ruby-tcltk","fixed_in":["0:1.8.1-7.EL4.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:3.1","package":"ruby1.6","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-12sarge2"}]}],"versions":["1.6.8-12","1.6.8-12sarge1"]},{"source":"osv","ecosystem":"Debian:3.1","package":"ruby1.8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.2-7sarge4"}]}],"versions":["1.8.2-7","1.8.2-7sarge1","1.8.2-7sarge2"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"ruby-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"ruby-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::as","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ruby-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ruby-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::desktop","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"ruby-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"ruby-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::es","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ruby-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ruby-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:3::ws","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.8-9.EL3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"ruby-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"ruby-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::as","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ruby-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ruby-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::desktop","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"ruby-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"ruby-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::es","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"irb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ruby","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ruby-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ruby-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ruby-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ruby-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ruby-mode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:4::ws","package":"ruby-tcltk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.1-7.EL4.6"}]}]}],"products":[{"vendor":"yukihiro_matsumoto","product":"ruby"}],"references":[{"url":"ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P","tags":["vendor-advisory","x_refsource_SGI","x_transferred"]},{"url":"http://www.securityfocus.com/bid/18944","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch"]},{"url":"http://secunia.com/advisories/21657","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9983","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://secunia.com/advisories/21749","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://jvn.jp/jp/JVN%2313947696/index.html","tags":["third-party-advisory","x_refsource_JVN","x_transferred"]},{"url":"http://secunia.com/advisories/21009","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:134","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"]},{"url":"http://secunia.com/advisories/21598","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/21233","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2006/2760","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27725","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.osvdb.org/27144","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.osvdb.org/27145","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.ubuntu.com/usn/usn-325-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Patch"]},{"url":"http://www.debian.org/security/2006/dsa-1157","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://secunia.com/advisories/21337","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003907.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"http://www.novell.com/linux/security/advisories/2006_21_sr.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://secunia.com/advisories/21272","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/21236","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.debian.org/security/2006/dsa-1139","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0604.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Patch","Vendor Advisory"]},{"url":"http://jvn.jp/jp/JVN%2383768862/index.html","tags":["third-party-advisory","x_refsource_JVN","x_transferred"]},{"url":"http://lists.freebsd.org/pipermail/freebsd-security/2006-July/003915.html","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-3694","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rx2v-jmvm-3c4h"},{"url":"https://access.redhat.com/errata/RHSA-2006:0604","tags":["advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=199539","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=199545","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0604.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2006-3694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1618154","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2006-3694","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2006-3694","description":"Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass \"safe level\" checks via unspecified vectors involving (1) the alias function and (2) \"directory operations\".","status":"published","published":"2006-07-19T01:00:00Z","modified":"2024-08-07T18:39:53.9Z","updated_at":"2026-11-02T14:33:49.62488Z"}],"euvd":[{"id":"EUVD-2006-3689","description":"Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass \"safe level\" checks via unspecified vectors involving (1) the alias function and (2) \"directory operations\".","status":"published","published":"2006-07-19T01:00:00Z","modified":"2024-08-07T18:39:53Z","updated_at":"2026-11-03T01:15:55.422871Z"}],"ghsa":[{"id":"GHSA-rx2v-jmvm-3c4h","title":"Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass \"safe...","description":"Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass \"safe level\" checks via unspecified vectors involving (1) the alias function and (2) \"directory operations\".","status":"published","published":"2022-05-03T03:16:09Z","modified":"2023-02-01T05:01:20Z","updated_at":"2026-11-02T14:49:42.752886Z"}],"nvd":[{"id":"CVE-2006-3694","description":"Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass \"safe level\" checks via unspecified vectors involving (1) the alias function and (2) \"directory operations\".","status":"published","published":"2006-07-21T14:03:00Z","modified":"2026-06-16T22:27:34.677Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:05.130518Z"}],"osv":[{"id":"DSA-1139-1","title":"ruby1.6 - missing privilege checks","status":"published","published":"2006-08-03T00:00:00Z","modified":"2026-03-09T01:01:41.271203Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"DSA-1157","title":"ruby1.8","status":"published","published":"2006-08-27T00:00:00Z","modified":"2026-03-09T01:01:03.593719Z","updated_at":"2026-11-02T15:46:14.285228Z"},{"id":"RHSA-2006:0604","title":"Red Hat Security Advisory: ruby security update","status":"published","published":"2024-09-15T16:19:35Z","modified":"2026-06-26T10:04:52Z","updated_at":"2026-11-02T15:52:59.135214Z"}]}}