CVE-2012-2140

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
VendorProductVersion
rubygemsmail_gem
𝑥
≤ 2.4.1
rubygemsmail_gem
2.3.2
rubygemsmail_gem
2.3.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
ruby-mail
bullseye
2.7.1+dfsg1-1.1
fixed
bookworm
2.7.1+dfsg1-2
fixed
sid
2.8.1+dfsg1-2
fixed
trixie
2.8.1+dfsg1-2
fixed
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080645.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080648.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080747.html
http://secunia.com/advisories/48970
http://www.openwall.com/lists/oss-security/2012/04/25/8
http://www.openwall.com/lists/oss-security/2012/04/26/1
https://bugzilla.novell.com/show_bug.cgi?id=759092
https://bugzilla.redhat.com/show_bug.cgi?id=816352
https://github.com/mikel/mail/blob/9beb079c70d236a5ad2e1ba95b2c977e55deb7af/CHANGELOG.rdoc
https://github.com/mikel/mail/commit/39b590ddb08f90ddbe445837359a2c8843e533d0
https://github.com/mikel/mail/commit/ac56f03bdfc30b379aeecd4ff317d08fdaa328c2
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080645.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080648.html
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080747.html
http://secunia.com/advisories/48970
http://www.openwall.com/lists/oss-security/2012/04/25/8
http://www.openwall.com/lists/oss-security/2012/04/26/1
https://bugzilla.novell.com/show_bug.cgi?id=759092
https://bugzilla.redhat.com/show_bug.cgi?id=816352
https://github.com/mikel/mail/blob/9beb079c70d236a5ad2e1ba95b2c977e55deb7af/CHANGELOG.rdoc
https://github.com/mikel/mail/commit/39b590ddb08f90ddbe445837359a2c8843e533d0
https://github.com/mikel/mail/commit/ac56f03bdfc30b379aeecd4ff317d08fdaa328c2