RubyGems mail Remote Arbitrary Shell Command Injection Vulnerability
BID:46021
Info
RubyGems mail Remote Arbitrary Shell Command Injection Vulnerability
| Bugtraq ID: | 46021 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-0739 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 26 2011 12:00AM |
| Updated: | Apr 13 2015 09:01PM |
| Credit: | Andy Lindeman and Steven Lorek |
| Vulnerable: |
RubyGems mail 2.2.14 |
| Not Vulnerable: |
RubyGems mail 2.2.15 |
Discussion
RubyGems mail Remote Arbitrary Shell Command Injection Vulnerability
RubyGems mail is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data.
Successful exploitation requires the gem to use sendmail for mail delivery.
Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running the application.
RubyGems mail versions prior to 2.2.15 are vulnerable.
RubyGems mail is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data.
Successful exploitation requires the gem to use sendmail for mail delivery.
Remote attackers can exploit this issue to execute arbitrary shell commands with the privileges of the user running the application.
RubyGems mail versions prior to 2.2.15 are vulnerable.
Exploit / POC
RubyGems mail Remote Arbitrary Shell Command Injection Vulnerability
Attackers can exploit this issue using standard tools.
Attackers can exploit this issue using standard tools.
Solution / Fix
RubyGems mail Remote Arbitrary Shell Command Injection Vulnerability
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
RubyGems mail Remote Arbitrary Shell Command Injection Vulnerability
References:
References:
- RubyGems Release Notes (Google)
- Vendor Homepage (RubyGems)