VDB
DEBIAN-CVE-2009-3086
DEBIAN-CVE-2009-3086
PUBLISHED
A certain algorithm in Ruby on Rails 2.1.0 through 2.2.2, and 2.3.x before 2.3.4, leaks information about the complexity of message-digest signature verification in the cookie store, which might allow remote attackers to forge a digest via multiple attempts.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | rails | 0, 0, 0 |
| Debian:12 | rails | 0, 0, 0 |
| Debian:11 | rails | 0, 0, 0 |
| Debian:14 | rails | 0, 0, 0 |
Timeline
- Sep 8, 2009 CVE Published
- Apr 28, 2026 CVE Updated