25 matches found
CVE-2013-5647
CVE-2013-5647 affects the Ruby gem Sounder (library: lib/sounder/sound.rb) version 1.0.1. The vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in a filename, indicating a remote command execution flaw in file-name handling. Several sources (NVD, Red Hat...
CVE-2013-5647
lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename...
CVE-2013-5647: Improper Control of Generation of Code
lib/sounder/sound.rb in the sounder gem 1.0.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a filename...
PT-2013-5709
Name of the Vulnerable Software and Affected Versions sounder gem version 1.0.1 Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in a filename, specifically in the lib/sounder/sound.rb file. Recommendations For sounder gem version 1.0.1, conside...
Sounder Gem for Ruby File Name Handling Arbitrary Command Execution
Sounder Gem for Ruby contains a flaw that is triggered during the handling of file names. This may allow a context-dependent attacker to execute arbitrary commands...