Code injection

The deliver function in the sendmail delivery agent lib/mail/network/deliverymethods/sendmail.rb in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address...

CVE-2011-0739

CVE-2011-0739 affects the Ruby Mail gem (2.2.14 and earlier). The root cause is the deliver() path in the sendmail delivery method (lib/mail/network/delivery_methods/sendmail.rb), where shell metacharacters in an e-mail address can be injected to execute arbitrary commands. Public references conf...

PT-2011-2600

Name of the Vulnerable Software and Affected Versions Ruby Mail gem versions 2.2.14 and earlier Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address. This is due to a problem in the deliver function in the sendmail delivery agen...