CVE-2008-4310

CVE-2008-4310 describes a denial-of-service vulnerability in the httputils.rb component of WEBrick, a web server library included with Ruby versions 1.8.1 and 1.8.5, notably affecting Red Hat Enterprise Linux 4 and 5. This flaw, an incomplete fix for a previous issue, allows remote attackers to consume excessive CPU resources through a specially crafted HTTP request. With a CVSS score of 7.8 (High), it presents a significant risk due to its network-based attack vector and low attack complexity, leading to a complete loss of availability. While there is no evidence of active exploitation or inclusion in the KEV catalog, an exploit module for Ruby 1.9 exists on ExploitDB, and the vulnerability has received minimal community discussion or media coverage.