CVE-2010-3928 Ruby Version Manager (RVM) before 1.2.1 writes file contents to a terminal without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via a crafted f...
MediumCVSS 6.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ruby Version Manager (RVM) before 1.2.1 writes file contents to a terminal without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via a crafted file, related to an "escape sequence injection vulnerability." NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wayneeseguin ruby version manager | <= 1.2.0 | No fix listed |
References
- JVN#30414126 third-party-advisory
- JVNDB-2011-000005 third-party-advisory
- 70521 vdb-entry
- 42952 third-party-advisory vendor-advisory
- 45841 vdb-entry
- ADV-2011-0174 vdb-entry vendor-advisory
- ruby-manager-escape-command-execution(64746) vdb-entry