RubyGems mail Directory Traversal and Command Injection Vulnerabilities

Bugtraq ID:	53257
Class:	Input Validation Error
CVE:	CVE-2012-2139 CVE-2012-2140
Remote:	Yes
Local:	No
Published:	Apr 26 2012 12:00AM
Updated:	Apr 13 2015 09:42PM
Credit:	The vendor has reported these issues.
Vulnerable:	RubyGems mail 2.4.3 Redhat CloudForms 0
Not Vulnerable:	RubyGems mail 2.4.4 Redhat CloudForms 1.1

RubyGems mail Directory Traversal and Command Injection Vulnerabilities

RubyGems mail is prone to a directory-traversal vulnerability and multiple command-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Remote attackers can use a specially crafted request with directory-traversal sequences ('../') to retrieve arbitrary files in the context of the application. Also, attackers can execute arbitrary commands with the privileges of the user running the application.

RubyGems mail Directory Traversal and Command Injection Vulnerabilities

Attackers can exploit these issues through a browser.

RubyGems mail Directory Traversal and Command Injection Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

RubyGems mail Directory Traversal and Command Injection Vulnerabilities

References:

• RubyGems mail (RubyGems)
  
• Vendor Homepage (RubyGems)
  
• Version 2.4.4 Changelog (RubyGems)