oss-sec mailing list archives

CVE request: ruby on rails authenticate_with_http_digest bypass

From: Thomas Biege <thomas () suse de>
Date: Thu, 2 Jul 2009 14:29:40 +0200

Hi,
I seems this issue didn't occur in the CVE databases yet.

http://weblog.rubyonrails.org/2009/6/3/security-problem-with-authenticate_with_http_digest

-- 
Bye,
     Thomas
-- 
 Thomas Biege <thomas () suse de>, SUSE LINUX, Security Support & Auditing
 SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)
-- 
           Hamming's Motto:
           The purpose of computing is insight, not numbers.
                                -- Richard W. Hamming

Current thread:

CVE request: ruby on rails authenticate_with_http_digest bypass Thomas Biege (Jul 02)