CVE-2005-2337

2005-10-0723:02:00

[email protected]

web.nvd.nist.gov

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.021

Percentile

89.3%

JSON

Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when Ruby processes a program through standard input (stdin).

Affected configurations

Nvd

Node

yukihiro_matsumotorubyMatch1.6

yukihiro_matsumotorubyMatch1.6.1

yukihiro_matsumotorubyMatch1.6.2

yukihiro_matsumotorubyMatch1.6.3

yukihiro_matsumotorubyMatch1.6.4

yukihiro_matsumotorubyMatch1.6.5

yukihiro_matsumotorubyMatch1.6.6

yukihiro_matsumotorubyMatch1.6.7

yukihiro_matsumotorubyMatch1.8

yukihiro_matsumotorubyMatch1.8.1

yukihiro_matsumotorubyMatch1.8.2_pre1

yukihiro_matsumotorubyMatch1.8.2_pre2

VendorProductVersionCPE
yukihiro_matsumotoruby1.6cpe:2.3:a:yukihiro_matsumoto:ruby:1.6:*:*:*:*:*:*:*
yukihiro_matsumotoruby1.6.1cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.1:*:*:*:*:*:*:*
yukihiro_matsumotoruby1.6.2cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.2:*:*:*:*:*:*:*
yukihiro_matsumotoruby1.6.3cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.3:*:*:*:*:*:*:*
yukihiro_matsumotoruby1.6.4cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.4:*:*:*:*:*:*:*
yukihiro_matsumotoruby1.6.5cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.5:*:*:*:*:*:*:*
yukihiro_matsumotoruby1.6.6cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.6:*:*:*:*:*:*:*
yukihiro_matsumotoruby1.6.7cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.7:*:*:*:*:*:*:*
yukihiro_matsumotoruby1.8cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:*:*:*:*:*:*:*
yukihiro_matsumotoruby1.8.1cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
yukihiro_matsumoto	ruby	1.6	cpe:2.3:a:yukihiro_matsumoto:ruby:1.6:::::::*
yukihiro_matsumoto	ruby	1.6.1	cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.1:::::::*
yukihiro_matsumoto	ruby	1.6.2	cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.2:::::::*
yukihiro_matsumoto	ruby	1.6.3	cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.3:::::::*
yukihiro_matsumoto	ruby	1.6.4	cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.4:::::::*
yukihiro_matsumoto	ruby	1.6.5	cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.5:::::::*
yukihiro_matsumoto	ruby	1.6.6	cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.6:::::::*
yukihiro_matsumoto	ruby	1.6.7	cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.7:::::::*
yukihiro_matsumoto	ruby	1.8	cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:::::::*
yukihiro_matsumoto	ruby	1.8.1	cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.1:::::::*