CVE-2012-4466 Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the....
MediumCVSS 5.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the name_err_mesg_to_str API function, which marks the string as tainted, a different vulnerability than CVE-2011-1005.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ruby-lang ruby | = 1.8.7 | No fix listed |
| ruby-lang ruby | = 1.8.7-p160 | No fix listed |
| ruby-lang ruby | = 1.8.7-p17 | No fix listed |
| ruby-lang ruby | = 1.8.7-p173 | No fix listed |
| ruby-lang ruby | = 1.8.7-p174 | No fix listed |
| ruby-lang ruby | = 1.8.7-p22 | No fix listed |
| ruby-lang ruby | = 1.8.7-p248 | No fix listed |
| ruby-lang ruby | = 1.8.7-p249 | No fix listed |
| ruby-lang ruby | = 1.8.7-p299 | No fix listed |
| ruby-lang ruby | = 1.8.7-p301 | No fix listed |
| ruby-lang ruby | = 1.8.7-p302 | No fix listed |
| ruby-lang ruby | = 1.8.7-p330 | No fix listed |
| ruby-lang ruby | = 1.8.7-p334 | No fix listed |
| ruby-lang ruby | = 1.8.7-p352 | No fix listed |
| ruby-lang ruby | = 1.8.7-p357 | No fix listed |
| ruby-lang ruby | = 1.8.7-p358 | No fix listed |
| ruby-lang ruby | = 1.8.7-p370 | No fix listed |
| ruby-lang ruby | = 1.8.7-p71 | No fix listed |
| ruby-lang ruby | = 1.8.7-p72 | No fix listed |
| ruby-lang ruby | = 1.8.7-preview1 | No fix listed |
| ruby-lang ruby | = 1.8.7-preview2 | No fix listed |
| ruby-lang ruby | = 1.8.7-preview3 | No fix listed |
| ruby-lang ruby | = 1.8.7-preview4 | No fix listed |
| ruby-lang ruby | = 1.9.3 | No fix listed |
| ruby-lang ruby | = 1.9.3-p0 | No fix listed |
Show 9 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ruby-lang ruby | = 1.9.3-p125 | No fix listed |
| ruby-lang ruby | = 1.9.3-p194 | No fix listed |
| ruby-lang ruby | = 2.0 | No fix listed |
| ruby-lang ruby | = 2.0.0 | No fix listed |
| ruby-lang ruby | = 2.0.0-p0 | No fix listed |
| ruby-lang ruby | = 2.0.0-preview1 | No fix listed |
| ruby-lang ruby | = 2.0.0-preview2 | No fix listed |
| ruby-lang ruby | = 2.0.0-rc1 | No fix listed |
| ruby-lang ruby | = 2.0.0-rc2 | No fix listed |
References
- FEDORA-2012-15376 vendor-advisory
- FEDORA-2012-15395 vendor-advisory
- svn.ruby-lang.org
- MDVSA-2013:124 vendor-advisory
- [oss-security] 20121002 CVE Request: Ruby safe level bypasses mailing-list
- [oss-security] 20121003 Re: CVE Request: Ruby safe level bypasses mailing-list
- www.ruby-lang.org vendor-advisory
- bugzilla.redhat.com
- wiki.mageia.org