Lucene search
+L

3 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:54 a.m.5 views

SUSE CVE-2011-1004

The FileUtils.removeentrysecure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack...

6.3CVSS6.7AI score0.00385EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2011/06/28 5:27 p.m.6 views

Ruby: Symlink race condition by removing directory trees in fileutils module

The FileUtils.removeentrysecure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack...

6.3CVSS5.9AI score0.00385EPSS
SaveExploits0References4
Snyk
Snyk
added 2011/03/02 8:0 p.m.4 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack. The FileUtils.removeentrysecure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a...

7.1CVSS6.5AI score0.00385EPSS
SaveExploits0References2
Rows per page
Query Builder