119 matches found
Malicious Package
Overview capistranorake is a malicious package. Affected versions of this package were found to be a Malicious Package, as it utilised typosquatting to run Malicious 3rd party scripts. It replaced genuine packages using an and replaced it with - and vice versa Remediation Avoid using capistranora...
CVE-2020-8130
There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...
USN-4295-1: Rake vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands. CVEs contained in this USN include: CVE-2020-8130. Affected Cloud...
Updated ruby-rake packages fix security vulnerability
Updated ruby-rake package fixes security vulnerability: There is an OS command injection vulnerability in Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character CVE-2020-8130...
MGASA-2020-0121 Updated ruby-rake packages fix security vulnerability
Updated ruby-rake package fixes security vulnerability: There is an OS command injection vulnerability in Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character CVE-2020-8130...
Ubuntu 16.04 LTS / 18.04 LTS : Rake vulnerability (USN-4295-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4295-1 advisory. It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands. Tenable has...
Ubuntu: Security Advisory (USN-4295-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4295-1: Rake vulnerability
It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands...
USN-4295-1 rake vulnerability
It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands...
GHSA-JPPV-GW3R-W3Q8 OS Command Injection in Rake
There is an OS command injection vulnerability in Ruby Rake before 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |...
OS Command Injection in Rake
There is an OS command injection vulnerability in Ruby Rake before 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |...
Debian DLA-2120-1 : rake security update
There is an OS command injection vulnerability in Rake a ruby make-like utility 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |. For Debian 8 'Jessie', this problem has been fixed in version 10.3.2-2+deb8u1. We recommend that you upgrade your rake packages...
Debian: Security Advisory (DLA-2120-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2120-1] rake security update
Package : rake Version : 10.3.2-2+deb8u1 CVE ID : CVE-2020-8130 There is an OS command injection vulnerability in Rake a ruby make-like utility 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |. For Debian 8 "Jessie", this problem has been fixed in version...
OS Command Injection
rake is vulnerable to OS command injection. The vulnerability exists as it improperly handles the value of the command file name in Rake::FileList, allowing OS command injection when list.egrep is called with a malicious file name such as | touch evil.txt...
Ruby Rake OS Command Injection Vulnerability
Rake is a software task management and formation automation tool. An operating system command injection vulnerability exists in Ruby Rake versions prior to Rake 12.3.3:: FileList. The vulnerability arises from a network system or product not properly filtering special characters, commands, etc...
CVE-2020-8130
There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |...
CVE-2020-8130
There is an OS command injection vulnerability in Ruby Rake 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character |...
