Skip to content
OpenAdvisories
Unscored DSA-1410-1 2 CVEs

ruby1.8 - possible man-in-the-middle attacks

Published Nov 24, 2007 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 3.1 ruby1.8 1.8.2-7sarge6
Debian · 4.0 ruby1.8 1.8.5-4etch1

Vulnerabilities 2

  • Unscored —
    CVE-2007-5162

    The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does no…

  • Unscored —
    CVE-2007-5770

    The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in Ruby 1.8.5 and 1.8.6…