Lucene search

GoogleOSV:GHSA-RP63-JFMW-532W

HistoryOct 24, 2017 - 6:33 p.m.

Mail Gem Improper Input Validation vulnerability

2017-10-2418:33:38

Google

osv.dev

0.013 Low

EPSS

Percentile

86.1%

JSON

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.

CPENameOperatorVersion
maileq2.1.2
maileq2.4.0
maileq2.2.4
maileq2.2.20
maileq1.4.1
maileq1.5.4
maileq1.3.3
maileq1.3.2
maileq2.1.1
maileq1.5.3

Name	Operator	Version
mail	eq	2.1.2
mail	eq	2.4.0
mail	eq	2.2.4
mail	eq	2.2.20
mail	eq	1.4.1
mail	eq	1.5.4
mail	eq	1.3.3
mail	eq	1.3.2
mail	eq	2.1.1
mail	eq	1.5.3

Rows per page:

1-10 of 621

References

lists.fedoraproject.org/pipermail/package-announce/2012-May/080645.html

lists.fedoraproject.org/pipermail/package-announce/2012-May/080648.html

lists.fedoraproject.org/pipermail/package-announce/2012-May/080747.html

www.openwall.com/lists/oss-security/2012/04/25/8

www.openwall.com/lists/oss-security/2012/04/26/1

bugzilla.novell.com/show_bug.cgi?id=759092

bugzilla.redhat.com/show_bug.cgi?id=816352

github.com/mikel/mail

github.com/mikel/mail/blob/9beb079c70d236a5ad2e1ba95b2c977e55deb7af/CHANGELOG.rdoc

github.com/mikel/mail/commit/39b590ddb08f90ddbe445837359a2c8843e533d0

github.com/mikel/mail/commit/ac56f03bdfc30b379aeecd4ff317d08fdaa328c2

nvd.nist.gov/vuln/detail/CVE-2012-2140

0.013 Low

EPSS

Percentile

86.1%

JSON

Related for OSV:GHSA-RP63-JFMW-532W