CVE:CVE-2006-4111
CNNVD:CNNVD-200608-225
Ruby on Rails（Rails）是Rails核心团队开发维护的一套基于Ruby语言的开源Web应用框架，它是由大卫-海纳梅尔-韩森从美国37signals公司的项目管理工具Basecamp里分离出来的。
Rails的路由代码中存在漏洞，如果攻击者发布了上传文件利用HTTP GET请求的话，就会触发这个漏洞，导致拒绝服务。
solution:Upgrade rubyonrails rails to a higher version than 0.9.1,0.9.2,0.9.3,0.9.4,0.9.4.1,0.10.0,0.10.1,0.11.0,0.11.1,0.12.0,0.12.1,0.13.0,0.13.1,0.14.1,0.14.2,0.14.3,0.14.4,1.0.0,1.1.0,1.1.1,1.1.2,1.1.3,and avoid the version 0.9.1,0.9.2,0.9.3,0.9.4,0.9.4.1,0.10.0,0.10.1,0.11.0,0.11.1,0.12.0,0.12.1,0.13.0,0.13.1,0.14.1,0.14.2,0.14.3,0.14.4,1.0.0,1.1.0,1.1.1,1.1.2,1.1.3; Upgrade rubyonrails ruby_on_rails to a higher version than 1.1.4,0.5.0,0.5.5,0.5.6,0.5.7,0.6.0,0.6.5,0.7.0,0.8.0,0.8.5,0.9.0,and avoid the version (,1.1.4],0.5.0,0.5.5,0.5.6,0.5.7,0.6.0,0.6.5,0.7.0,0.8.0,0.8.5,0.9.0