CVE-2005-2337
Published Oct 7, 2005
Last updated 7 years ago
Overview
- Description
- Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when Ruby processes a program through standard input (stdin).
- Source
- cret@cert.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.5
- Impact score
- 6.4
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46EE9BA9-DE82-4461-8D05-8B4DA2BAFE19"
},
{
"criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0CCA0B06-65B5-43F5-949A-82E7D92DD90A"
},
{
"criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A236FC9B-F3CF-43A7-BB19-4255A2CC33D4"
},
{
"criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94FF7BFC-8107-44F6-946A-D358152E53D6"
},
{
"criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "609CC668-6AE0-4047-BDE4-1A6CFD17901B"
},
{
"criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A035112-8F5B-455D-9085-993C9B66627C"
},
{
"criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4C1DE25-8BD7-4729-800D-0B5D712838A5"
},
{
"criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.6.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9313467-150B-4231-80E5-35EFD6B64978"
},
{
"criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05A4185F-1CE1-48D1-B967-01A96527417B"
},
{
"criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "551CCA30-00E2-46CF-A05B-FA8F9827CDF4"
},
{
"criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.2_pre1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8AF152DC-D5B5-4692-AA7F-38357A2C48B3"
},
{
"criteria": "cpe:2.3:a:yukihiro_matsumoto:ruby:1.8.2_pre2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "724A539F-F54A-4896-9116-89D35350670D"
}
],
"operator": "OR"
}
]
}
]