CVE-2013-5671 Code injection in dragonfly gem
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems dragonfly(RubyGems) | < 1.0.0 | 1.0.0 |
| rubygems fog-dragonfly(RubyGems) | <= 0.9.15 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.1.0 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.1.1 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.1.4 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.1.5 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.1.6 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.2.1 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.3.0 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.3.2 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.3.3 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.3.4 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.3.5 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.3.6 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.3.7 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.3.8 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.4.0 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.4.1 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.4.2 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.4.3 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.4.4 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.5.0 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.5.1 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.5.2 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.5.3 | No fix listed |
Show 38 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems dragonfly(RubyGems) | = 0.5.4 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.5.5 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.5.6 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.5.7 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.6.0 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.6.1 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.6.2 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.7.0 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.7.1 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.7.2 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.7.3 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.7.4 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.7.5 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.7.6 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.7.7 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.8.0 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.8.1 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.8.2 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.8.4 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.8.5 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.8.6 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.9.0 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.9.1 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.9.10 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.9.11 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.9.12 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.9.13 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.9.14 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.9.15 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.9.2 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.9.3 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.9.4 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.9.5 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.9.8 | No fix listed |
| rubygems dragonfly(RubyGems) | = 0.9.9 | No fix listed |
| rubygems fog-dragonfly(RubyGems) | = 0.8.1 | No fix listed |
| rubygems fog-dragonfly(RubyGems) | = 0.8.2 | No fix listed |
| mark evans fog-dragonfly | = 0.8.2 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- 20130903 Remote Command Injection in fog-dragonfly-0.8.2 Ruby Gem exploit mailing-list
- [oss-security] 20130901 Remote Command Injection in fog-dragonfly-0.8.2 Ruby Gem exploit mailing-list
- [oss-security] 20130901 Re: Remote Command Injection in fog-dragonfly-0.8.2 Ruby Gem exploit mailing-list
- github.com
- github.com patch
- web.archive.org
- github.com
- github.com product
- 96798 vdb-entry
- www.vapid.dhs.org exploit