PT-2013-6266 · Webbynode · Webbynode Gem

Lcashdol

·

CVE-2013-7086

·

Publicado

2013-12-19

·

Atualizado

2017-10-24

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Webbynode gem versions 1.0.5.3 and earlier
Description The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a growlnotify message. This is due to a problem in the message function in lib/webbynode/notify.rb.
Recommendations For Webbynode gem versions 1.0.5.3 and earlier, consider disabling the message function in lib/webbynode/notify.rb until a patch is available to prevent the execution of arbitrary commands via shell metacharacters in a growlnotify message.

Exploit

Correção

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2013-7086
GHSA-P65M-QR5X-RRQQ

Produtos afetados

Webbynode Gem