Lucene search

CVE-2011-1005

🗓️ 02 Mar 2011 00:00:00Reported by ubuntu.comType

Safe-level feature in Ruby allows attackers to modify strings via Exception#to_s metho

Reporter	Title	Published	Views	Family All 146
UbuntuCve	CVE-2012-4481	5 Oct 201200:00	–	ubuntucve
UbuntuCve	CVE-2012-4466	3 Oct 201200:00	–	ubuntucve
UbuntuCve	CVE-2012-4464	3 Oct 201200:00	–	ubuntucve
Cvelist	CVE-2012-4481	2 May 201314:00	–	cvelist
Cvelist	CVE-2011-1005	2 Mar 201119:00	–	cvelist
Cvelist	CVE-2012-4466	25 Apr 201323:00	–	cvelist
Cvelist	CVE-2012-4464	25 Apr 201323:00	–	cvelist
Veracode	Unauthorized Modification	15 Jan 201908:52	–	veracode
Veracode	Arbitrary Code Execution	2 May 201904:45	–	veracode
Veracode	Access Control Bypass	10 Apr 202000:59	–	veracode

Source	Link
ruby-lang	www.ruby-lang.org/en/news/2011/02/18/exception-methods-can-bypass-safe/
ubuntu	www.ubuntu.com/security/notices/USN-1377-1
ubuntu	www.ubuntu.com/security/notices/USN-1583-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2011-1005
launchpad	www.launchpad.net/bugs/cve/CVE-2011-1005
security-tracker	www.security-tracker.debian.org/tracker/CVE-2011-1005

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	10.04	noarch	ruby1.8	1.8.7.249-2ubuntu0.1	UNKNOWN
ubuntu	10.10	noarch	ruby1.8	1.8.7.299-2ubuntu0.1	UNKNOWN
ubuntu	11.04	noarch	ruby1.8	1.8.7.302-2ubuntu0.1	UNKNOWN
ubuntu	12.04	noarch	ruby1.9.1	1.9.3.0-1ubuntu2.2	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

02 Mar 2011 00:00Current

4.3Medium risk

Vulners AI Score4.3

CVSS25.0

EPSS0.011