Lucene search
RubySecRUBY:RUBY-2009-4492-61774HistoryJan 09, 2010 - 9:00 p.m.
CVE-2009-4492 ruby WEBrick log escape sequence
2010-01-0921:00:00
RubySec
rubysec.com
8
WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel
248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file
without sanitizing non-printable characters, which might allow remote attackers
to modify a window’s title, or possibly execute arbitrary commands or overwrite
files, via an HTTP request containing an escape sequence for a terminal emulator.
Related
openvas
openvas
Fedora Update for ruby FEDORA-2010-0530
2010-03-02 00:00:00
Mandriva Update for ruby MDVSA-2010:017 (ruby)
2010-01-20 00:00:00
Gentoo Security Advisory GLSA 201001-09 (ruby)
2010-01-20 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:59:03
fedora
fedora
[SECURITY] Fedora 12 Update: ruby-1.8.6.383-6.fc12
2010-01-14 01:27:05
[SECURITY] Fedora 12 Update: ruby-1.8.6.399-6.fc12
2010-08-23 21:56:42
[SECURITY] Fedora 11 Update: ruby-1.8.6.383-6.fc11
2010-01-14 01:27:31
nessus
nessus
Fedora 12 : ruby-1.8.6.383-6.fc12 (2010-0530)
2010-07-01 00:00:00
Fedora 11 : ruby-1.8.6.383-6.fc11 (2010-0533)
2010-07-01 00:00:00
GLSA-201001-09 : Ruby: Terminal Control Character Injection
2010-02-25 00:00:00
gentoo
gentoo
Ruby: Terminal Control Character Injection
2010-01-14 00:00:00
osv
osv
WEBrick Improper Input Validation vulnerability
2017-10-24 18:33:38
ubuntucve
ubuntucve
CVE-2009-4492
2010-01-13 00:00:00
github
github
WEBrick Improper Input Validation vulnerability
2017-10-24 18:33:38
cve
cve
CVE-2009-4492
2010-01-13 20:30:00
prion
prion
Design/Logic Flaw
2010-01-13 20:30:00
ubuntu
ubuntu
Ruby vulnerabilities
2010-02-16 00:00:00
oraclelinux
oraclelinux
ruby security update
2011-06-28 00:00:00
ruby security update
2011-06-28 00:00:00
centos
centos
irb, ruby security update
2011-08-14 21:12:51
ruby security update
2011-06-30 16:28:46
redhat
redhat
(RHSA-2011:0908) Moderate: ruby security update
2011-06-28 00:00:00
(RHSA-2011:0909) Moderate: ruby security update
2011-06-28 00:00:00
securityvulns
securityvulns
packetstorm
packetstorm
Nginx, Varnish, Cherokee, etc Log Injection
2010-01-11 00:00:00
Related for RUBY:RUBY-2009-4492-61774