Lucene search
UbuntuUSN-1603-1HistoryOct 10, 2012 - 12:00 a.m.
Ruby vulnerabilities
2012-10-1000:00:00
ubuntu.com
30
6.1 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
74.3%
Releases
- Ubuntu 12.04
- Ubuntu 11.10
- Ubuntu 11.04
- Ubuntu 10.04
Packages
- ruby1.8 - Interpreter of object-oriented scripting language Ruby 1.8
Details
Shugo Maedo and Vit Ondruch discovered that Ruby incorrectly allowed untainted
strings to be modified in protective safe levels. An attacker could use this
flaw to bypass intended access restrictions. (CVE-2012-4466, CVE-2012-4481)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 12.04 | noarch | libruby1.8 | < 1.8.7.352-2ubuntu1.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libruby1.8-dbg | < 1.8.7.352-2ubuntu1.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libtcltk-ruby1.8 | < 1.8.7.352-2ubuntu1.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | ruby1.8 | < 1.8.7.352-2ubuntu1.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | ruby1.8-dev | < 1.8.7.352-2ubuntu1.1 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libruby1.8 | < 1.8.7.352-2ubuntu0.2 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libruby1.8-dbg | < 1.8.7.352-2ubuntu0.2 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libtcltk-ruby1.8 | < 1.8.7.352-2ubuntu0.2 | UNKNOWN |
| Ubuntu | 11.10 | noarch | ruby1.8 | < 1.8.7.352-2ubuntu0.2 | UNKNOWN |
| Ubuntu | 11.10 | noarch | ruby1.8-dev | < 1.8.7.352-2ubuntu0.2 | UNKNOWN |
Related
nessus
nessus
Ubuntu 12.10 : ruby1.8 vulnerabilities (USN-1603-2)
2012-10-23 00:00:00
Ubuntu 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : ruby1.8 vulnerabilities (USN-1603-1)
2012-10-11 00:00:00
Mandriva Linux Security Advisory : ruby (MDVSA-2013:124)
2013-04-20 00:00:00
securityvulns
securityvulns
Ruby restrictions bypass
2012-10-15 00:00:00
[USN-1603-1] Ruby vulnerabilities
2012-10-15 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-1603-1)
2012-10-11 00:00:00
Ubuntu Update for ruby1.8 USN-1603-1
2012-10-11 00:00:00
Ubuntu Update for ruby1.8 USN-1603-2
2012-10-31 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2012-10-23 00:00:00
Ruby vulnerabilities
2012-10-10 00:00:00
Ruby vulnerabilities
2012-10-23 00:00:00
veracode
veracode
Authorization Bypass
2019-05-02 04:53:43
Unauthorized Modification
2019-01-15 08:52:55
Arbitrary Code Execution
2019-05-02 04:45:35
prion
prion
Design/Logic Flaw
2013-05-02 14:55:00
Code injection
2013-04-25 23:55:00
Design/Logic Flaw
2013-04-25 23:55:00
cve
cve
oraclelinux
oraclelinux
ruby security update
2013-03-07 00:00:00
ruby security and bug fix update
2013-01-11 00:00:00
ubuntucve
ubuntucve
fedora
fedora
[SECURITY] Fedora 18 Update: ruby-1.9.3.194-18.fc18
2012-10-09 00:29:34
[SECURITY] Fedora 17 Update: ruby-1.9.3.194-17.fc17
2012-10-14 03:50:48
[SECURITY] Fedora 17 Update: ruby-1.9.3.286-18.fc17
2012-10-22 01:59:29
freebsd
freebsd
ruby -- $SAFE escaping vulnerability about Exception#to_s/NameError#to_s
2012-08-21 00:00:00
seebug
seebug
Ruby 安全级别限制绕过漏洞(CVE-2012-4466)
2013-04-28 00:00:00
amazon
amazon
Medium: ruby
2012-10-23 10:43:00
Medium: ruby
2013-03-14 22:04:00
rubygems
rubygems
Ruby Exception#to_s / NameError#to_s Methods Safe Level Security Bypass
2012-10-11 20:00:00
redhat
redhat
(RHSA-2013:0129) Moderate: ruby security and bug fix update
2013-01-08 00:00:00
(RHSA-2013:0612) Moderate: ruby security update
2013-03-07 00:00:00
(RHSA-2013:0582) Moderate: Red Hat OpenShift Enterprise 1.1.1 update
2013-02-28 00:00:00
centos
centos
ruby security update
2013-03-09 00:47:26
ruby security update
2013-01-09 20:36:59
gentoo
gentoo
Ruby: Denial of service
2014-12-13 00:00:00
6.1 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
74.3%
Related for USN-1603-1