CVE-2012-4466
25.04.2013, 23:55
Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the name_err_mesg_to_str API function, which marks the string as tainted, a different vulnerability than CVE-2011-1005.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ruby-lang | ruby | 1.8.7 |
| ruby-lang | ruby | 1.8.7:p160 |
| ruby-lang | ruby | 1.8.7:p17 |
| ruby-lang | ruby | 1.8.7:p173 |
| ruby-lang | ruby | 1.8.7:p174 |
| ruby-lang | ruby | 1.8.7:p22 |
| ruby-lang | ruby | 1.8.7:p248 |
| ruby-lang | ruby | 1.8.7:p249 |
| ruby-lang | ruby | 1.8.7:p299 |
| ruby-lang | ruby | 1.8.7:p301 |
| ruby-lang | ruby | 1.8.7:p302 |
| ruby-lang | ruby | 1.8.7:p330 |
| ruby-lang | ruby | 1.8.7:p334 |
| ruby-lang | ruby | 1.8.7:p352 |
| ruby-lang | ruby | 1.8.7:p357 |
| ruby-lang | ruby | 1.8.7:p358 |
| ruby-lang | ruby | 1.8.7:p370 |
| ruby-lang | ruby | 1.8.7:p71 |
| ruby-lang | ruby | 1.8.7:p72 |
| ruby-lang | ruby | 1.8.7:preview1 |
| ruby-lang | ruby | 1.8.7:preview2 |
| ruby-lang | ruby | 1.8.7:preview3 |
| ruby-lang | ruby | 1.8.7:preview4 |
| ruby-lang | ruby | 1.9.3 |
| ruby-lang | ruby | 1.9.3:p0 |
| ruby-lang | ruby | 1.9.3:p125 |
| ruby-lang | ruby | 1.9.3:p194 |
| ruby-lang | ruby | 2.0 |
| ruby-lang | ruby | 2.0.0 |
| ruby-lang | ruby | 2.0.0:p0 |
| ruby-lang | ruby | 2.0.0:preview1 |
| ruby-lang | ruby | 2.0.0:preview2 |
| ruby-lang | ruby | 2.0.0:rc1 |
| ruby-lang | ruby | 2.0.0:rc2 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ruby1.8 |
| ||||||||||||||
| ruby1.9 |
| ||||||||||||||
| ruby1.9.1 |
|
Common Weakness Enumeration
References