Lucene search

JpcertCVE-2010-3928

HistoryJan 20, 2011 - 7:00 p.m.

CVE-2010-3928

2011-01-2019:00:04

jpcert

web.nvd.nist.gov

cve-2010-3928

rvm

remote execution

file contents

terminal

security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.011

Percentile

84.7%

JSON

Ruby Version Manager (RVM) before 1.2.1 writes file contents to a terminal without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via a crafted file, related to an “escape sequence injection vulnerability.” NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

wayneeseguinruby_version_managerRange≤1.2.0

VendorProductVersionCPE
wayneeseguinruby_version_manager*cpe:2.3:a:wayneeseguin:ruby_version_manager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
wayneeseguin	ruby_version_manager	*	cpe:2.3:a:wayneeseguin:ruby_version_manager::::::::

References

jvn.jp/en/jp/JVN30414126/index.html

jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000005.html

osvdb.org/70521

secunia.com/advisories/42952

www.securityfocus.com/bid/45841

www.vupen.com/english/advisories/2011/0174

exchange.xforce.ibmcloud.com/vulnerabilities/64746

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

Low

EPSS

0.011

Percentile

84.7%

JSON

Related for CVE-2010-3928