FreshPorts -- The Place For Ports If you buy from Amazon USA, please support us by using this link.
Follow us
Blog
Twitter

I am looking for an LTO tape library. Do you have one to spare?
Port details
rubygem-cgi_multipart_eof_fix 2.5.0 www on this many watch lists=0 search for ports that depend on this port
Fix an exploitable bug in CGI multipart parsing
Maintained by: ruby@FreeBSD.org search for ports maintained by this maintainer
Port Added: 08 Dec 2010 19:18:47
Also Listed In: rubygems
License: not specified in port


Fixes an exploitable bug in CGI multipart parsing which affects Ruby <= 1.8.5.
When multipart boundary attributes contain non-halting regular 
expression strings, the boundary searcher in the CGI module does not properly 
escape the parameter and will execute arbitrary regular expressions. 
This fix adds escaping for the user data.

    * Affected application servers: standalone CGI, Mongrel, WEBrick
    * Unaffected: FastCGI, Ruby 1.8.6 (all servers)
    * Unknown: mod_ruby

This fix will not modify versions of Ruby greater than 1.8.5, and is 
cumulative with previous CGI multipart vulnerability fixes. 

WWW: http://blog.evanweaver.com/pages/code#cgi_multipart_eof_fix
SVNWeb : Main Web Site : Distfiles Availability : PortsMon

NOTE: FreshPorts displays only required dependencies information. Optional dependencies are not covered.

Required To Build:
  1. devel/ruby-gems
  2. lang/ruby19
Required To Run:
  1. devel/ruby-gems
  2. lang/ruby19

This port is required by:

for Run * - deleted ports are only shown under the This port is required by section. It was harder to do for the Required section. Perhaps later...

To install the port: cd /usr/ports/www/rubygem-cgi_multipart_eof_fix/ && make install clean
To add the package: pkg install www/rubygem-cgi_multipart_eof_fix


Configuration Options
     No options to configure

Master Sites:
  1. ftp://ftp.FreeBSD.org/pub/FreeBSD/ports/distfiles/rubygem/
  2. http://production.cf.rubygems.org/gems/
  3. http://production.s3.rubygems.org/gems/

Number of commits found: 4

Commit History - (may be incomplete: see SVNWeb link above for full details)
DateByDescription
30 Oct 2013 03:00:33
Original commit files touched by this commit  2.5.0
Revision:332053
swills search for other commits by this committer
- Add stage support
20 Sep 2013 23:36:54
Original commit files touched by this commit  2.5.0
Revision:327776
bapt search for other commits by this committer
Add NO_STAGE all over the place in preparation for the staging support (cat:
www)
09 Dec 2010 02:31:11
Original commit files touched by this commit  2.5.0
pgollucci search for other commits by this committer
- pkg-desc WWW updates
08 Dec 2010 19:18:29
Original commit files touched by this commit  2.5.0
pgollucci search for other commits by this committer
Fixes an exploitable bug in CGI multipart parsing which affects Ruby <= 1.8.5.
When multipart boundary attributes contain non-halting regular
expression strings, the boundary searcher in the CGI module does not properly
escape the parameter and will execute arbitrary regular expressions.
This fix adds escaping for the user data.

    * Affected application servers: standalone CGI, Mongrel, WEBrick
    * Unaffected: FastCGI, Ruby 1.8.6 (all servers)
    * Unknown: mod_ruby

This fix will not modify versions of Ruby greater than 1.8.5, and is
cumulative with previous CGI multipart vulnerability fixes.

WWW:    http://blog.evanweaver.com/#cgi_multipart_eof_fix

Number of commits found: 4

Login
User Login
Create account

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD

This site
What is FreshPorts?
About the authors
FAQ
How big is it?
The latest upgrade!
Privacy
Forums
Blog
Contact

Search
Enter Keywords:
 
more...

Latest Vulnerabilities
asterisk11Sep 18
squidSep 18
squid33Sep 18
dbusSep 17
nginxSep 16
nginx-develSep 16
phpmyadminSep 13
ossec-hids-clientSep 11
ossec-hids-localSep 11
ossec-hids-serverSep 11
chromiumSep 09
trafficserverSep 05
apache22*Sep 03
apache22-event-mpm*Sep 03
apache22-itk-mpm*Sep 03

8 vulnerabilities affecting 19 ports have been reported in the past 14 days

* - modified, not new

All vulnerabilities


Ports
Home
Categories
Deleted ports
Sanity Test Failures
Newsfeeds


Statistics
Graphs
NEW Graphs (Javascript)
Traffic

Calculated hourly:
Port count 24132
Broken 116
Deprecated 46
Ignore 370
Forbidden 3
Restricted 205
No CDROM 94
Vulnerable 20
Expired 2
Set to expire 41
Interactive 0
new 24 hours 72
new 48 hours78
new 7 days93
new fortnight144
new month302

Servers and bandwidth provided by
New York Internet, SuperNews, and RootBSD
Valid HTML, CSS, and RSS.
Copyright © 2000-2014 Dan Langille. All rights reserved.