5.8 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.004 Low
EPSS
Percentile
74.3%
Tyler Hicks and Shugo Maeda discovered that Ruby incorrectly allowed untainted
strings to be modified in protective safe levels. An attacker could use this
flaw to bypass intended access restrictions. USN-1602-1 fixed these
vulnerabilities in other Ubuntu releases. This update provides the
corresponding updates for Ubuntu 12.10. (CVE-2012-4464, CVE-2012-4466)
Peter Bex discovered that Ruby incorrectly handled file path strings when
opening files. An attacker could use this flaw to open or create unexpected
files. (CVE-2012-4522)
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Ubuntu | 12.10 | noarch | libruby1.9.1 | <ย 1.9.3.194-1ubuntu1.2 | UNKNOWN |
Ubuntu | 12.10 | noarch | libruby1.9.1-dbg | <ย 1.9.3.194-1ubuntu1.2 | UNKNOWN |
Ubuntu | 12.10 | noarch | libtcltk-ruby1.9.1 | <ย 1.9.3.194-1ubuntu1.2 | UNKNOWN |
Ubuntu | 12.10 | noarch | ruby1.9.1 | <ย 1.9.3.194-1ubuntu1.2 | UNKNOWN |
Ubuntu | 12.10 | noarch | ruby1.9.1-dev | <ย 1.9.3.194-1ubuntu1.2 | UNKNOWN |
Ubuntu | 12.04 | noarch | libruby1.9.1 | <ย 1.9.3.0-1ubuntu2.4 | UNKNOWN |
Ubuntu | 12.04 | noarch | libruby1.9.1-dbg | <ย 1.9.3.0-1ubuntu2.4 | UNKNOWN |
Ubuntu | 12.04 | noarch | libtcltk-ruby1.9.1 | <ย 1.9.3.0-1ubuntu2.4 | UNKNOWN |
Ubuntu | 12.04 | noarch | ruby1.9.1 | <ย 1.9.3.0-1ubuntu2.4 | UNKNOWN |
Ubuntu | 12.04 | noarch | ruby1.9.1-dev | <ย 1.9.3.0-1ubuntu2.4 | UNKNOWN |