Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2011-1005

Опубликовано: 02 мар. 2011
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ruby-lang:ruby:1.8.6:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.8.6-420:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.8.7:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.8.7-330:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.8.8:dev:*:*:*:*:*:*

EPSS

Процентиль: 89%
0.04511
Низкий

5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu
больше 14 лет назад

The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname.

redhat
больше 14 лет назад

The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname.

debian
больше 14 лет назад

The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through ...

github
около 3 лет назад

The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#to_s method, as demonstrated by changing an intended pathname.

oracle-oval
почти 14 лет назад

ELSA-2011-0910: ruby security update (MODERATE)

EPSS

Процентиль: 89%
0.04511
Низкий

5 Medium

CVSS2

Дефекты

CWE-264