Skip to content
OpenAdvisories
Unscored DSA-1412-1 2 CVEs

ruby1.9 - possible man-in-the-middle attacks

Published Nov 24, 2007 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 4.0 ruby1.9 1.9.0+20060609-1etch1

Vulnerabilities 2

  • Unscored —
    CVE-2007-5162

    The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does no…

  • Unscored —
    CVE-2007-5770

    The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in Ruby 1.8.5 and 1.8.6…