Home > Vulnerability Database > CVE-2004-0755

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2004-0755

Date: August 18, 2004

The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.

Severity Score

4.0

Related Resources (9)

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2004-0755

Url: http://www.gentoo.org/security/en/glsa/glsa-200409-08.xml

Url: http://www.debian.org/security/2004/dsa-537

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2004:128

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11128

Url: http://secunia.com/advisories/12290/

Url: https://nvd.nist.gov/vuln/detail/CVE-2004-0755

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/16996

Url: https://www.mend.io/vulnerability-database/CVE-2004-0755

Severity Score

4.0

CVSS v3.1

Base Score:	4.0
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	NONE
Availability (A):	NONE

CVSS v2

Base Score:	2.1
Access Vector (AV):	LOCAL
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us