Описание
The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Satellite 6 | ruby193-rubygem-ruby_parser | Affected | ||
| CloudForms for RHEL 6 | rubygem-activesupport | Fixed | RHSA-2013:0548 | 21.02.2013 |
| CloudForms for RHEL 6 | rubygem-delayed_job | Fixed | RHSA-2013:0548 | 21.02.2013 |
| CloudForms for RHEL 6 | rubygem-nokogiri | Fixed | RHSA-2013:0548 | 21.02.2013 |
| CloudForms for RHEL 6 | rubygem-rack | Fixed | RHSA-2013:0548 | 21.02.2013 |
| CloudForms for RHEL 6 | rubygem-rails_warden | Fixed | RHSA-2013:0548 | 21.02.2013 |
| CloudForms for RHEL 6 | rubygem-rdoc | Fixed | RHSA-2013:0548 | 21.02.2013 |
| CloudForms for RHEL 6 | rubygem-rspec-rails | Fixed | RHSA-2013:0548 | 21.02.2013 |
| CloudForms for RHEL 6 | rubygem-ruby_parser | Fixed | RHSA-2013:0548 | 21.02.2013 |
| CloudForms for RHEL 6 | rubygem-shoulda | Fixed | RHSA-2013:0548 | 21.02.2013 |
Показывать по
Дополнительная информация
Статус:
EPSS
2.1 Low
CVSS2
Связанные уязвимости
The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.
The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser ...
ruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable name
EPSS
2.1 Low
CVSS2