Ruby Directory Traversal Vulnerability (CNVD-2018-07639)

Ruby is a cross-platform, object-oriented, dynamically typed programming language developed by Japanese software developer Yukihiro Matsumoto. tmpdir library is one of the libraries used to create files and directories. A directory traversal vulnerability exists in the Dir.mktmpdir method of the...

ALPINE-CVE-2018-6914

Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 might allow attackers to create arbitrary directories or files via a .. dot dot in the prefix argument...

UBUNTU-CVE-2018-6914

Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 might allow attackers to create arbitrary directories or files via a .. dot dot in the prefix argument...

PT-2012-2038

Name of the Vulnerable Software and Affected Versions PAR module versions prior to 1.003 Description The issue concerns the par mktmpdir function in the PAR module, which creates temporary files in a directory with a predictable name without verifying ownership and permissions of this directory...

PT-2012-1805

Name of the Vulnerable Software and Affected Versions PAR::Packer module versions prior to 1.012 Description The issue concerns the creation of temporary files in a directory with a predictable name by the par mktmpdir function, without verifying the ownership and permissions of this directory...