ruby-lang ruby 1.8.6-420 vulnerabilities and exploits

(subscribe to this query)

445

VMScore

The safe-level feature in Ruby 1.8.6 up to and including 1.8.6-420, 1.8.7 up to and including 1.8.7-330, and 1.8.8dev allows context-dependent malicious users to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname.

Ruby-lang Ruby 1.8.7-330 Ruby-lang Ruby 1.8.8 Ruby-lang Ruby 1.8.6-420 Ruby-lang Ruby 1.8.7 Ruby-lang Ruby 1.8.6

561

VMScore

The FileUtils.remove_entry_secure method in Ruby 1.8.6 up to and including 1.8.6-420, 1.8.7 up to and including 1.8.7-330, 1.8.8dev, 1.9.1 up to and including 1.9.1-430, 1.9.2 up to and including 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink a...

Ruby-lang Ruby 1.9.2 Ruby-lang Ruby 1.9.3 Ruby-lang Ruby 1.8.6 Ruby-lang Ruby 1.8.7 Ruby-lang Ruby 1.8.8 Ruby-lang Ruby 1.9.1

445

VMScore

lib/rexml/text.rb in the REXML parser in Ruby prior to 1.9.3-p392 allows remote malicious users to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack.

Ruby-lang Ruby 1.9.3 Ruby-lang Ruby 1.9.2 Ruby-lang Ruby Ruby-lang Ruby 1.9.1 Ruby-lang Ruby 1.9 Ruby-lang Ruby 2.0.0 Ruby-lang Ruby 2.0

383

VMScore

The safe-level feature in Ruby 1.8.7 allows context-dependent malicious users to modify strings via the NameError#to_s method when operating on Ruby objects. NOTE: this issue is due to an incomplete fix for CVE-2011-1005.

Ruby-lang Ruby 1.8.7

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook