PT-2013-1677
CVE-2012-4466
·
تاريخ النشر
2013-04-25
·
تاريخ التحديث
2016-10-03
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Ruby versions 1.8.7 before patchlevel 371
Ruby versions 1.9.3 before patchlevel 286
Ruby versions 2.0 before revision r37068
Description
The issue allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the
name err mesg to str API function. This function marks the string as tainted.Recommendations
For Ruby version 1.8.7, update to patchlevel 371 or later.
For Ruby version 1.9.3, update to patchlevel 286 or later.
For Ruby version 2.0, update to revision r37068 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾