CVE-2013-0162

Опубликовано: 01 мар. 2013

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ryan_davis:ruby_parser:*:*:*:*:*:*:*:*

Версия до 3.1.1 (включая)

cpe:2.3:a:ryan_davis:ruby_parser:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a1:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a2:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a3:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a4:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a5:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a6:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a7:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a8:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a9:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.0.a10:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ryan_davis:ruby_parser:3.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00149

Низкий

2.1 Low

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2013-0162

ubuntu

почти 13 лет назад

CVE-2013-0162

redhat

около 13 лет назад

CVE-2013-0162

debian

почти 13 лет назад

The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser ...

GHSA-8mvw-22r7-w6fq

github

почти 4 года назад

ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name

EPSS

Процентиль: 36%

0.00149

Низкий

2.1 Low

CVSS2

Дефекты

CWE-264