Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2007-0469
HistoryJan 24, 2007 - 1:00 a.m.

CVE-2007-0469

2007-01-2401:00:00
mitre
www.cve.org
5

AI Score

7.5

Confidence

Low

EPSS

0.02

Percentile

88.9%

JSON

The extract_files function in installer.rb in RubyGems before 0.9.1 does not check whether files exist before overwriting them, which allows user-assisted remote attackers to overwrite arbitrary files, cause a denial of service, or execute arbitrary code via crafted GEM packages.

Related

nessus 2
osv 1
ubuntucve 1
rubygems 1
prion 1
nvd 1
cve 1
github 1
securityvulns 1
nessus
nessus
openSUSE 10 Security Update : rubygems (rubygems-2644)
2007-10-17 00:00:00
RHEL 6 : rubygems (Unpatched Vulnerability)
2024-06-03 00:00:00
osv
osv
RubyGems file overwrite vulnerability
2022-05-01 17:44:34
ubuntucve
ubuntucve
CVE-2007-0469
2007-01-24 00:00:00
rubygems
rubygems
CVE-2007-0469 RubyGems: Specially-crafted Gem archive can overwrite system files
2007-01-21 21:00:00
prion
prion
Code injection
2007-01-24 01:28:00
nvd
nvd
CVE-2007-0469
2007-01-24 01:28:00
cve
cve
CVE-2007-0469
2007-01-24 01:28:00
github
github
RubyGems file overwrite vulnerability
2022-05-01 17:44:34
securityvulns
securityvulns
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2007-02-02 00:00:00

AI Score

7.5

Confidence

Low

EPSS

0.02

Percentile

88.9%

JSON
Related for CVELIST:CVE-2007-0469
nessus2osv1ubuntucve1rubygems1prion1nvd1cve1github1securityvulns1