Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2013-2616

Overview

Vulnerability Score 7.5 7.5
CVE Id CVE-2013-2616
Last Modified 21 Mar 2013 12:00:00
Published 20 Mar 2013 06:55:01
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2013-2616

Summary

lib/mini_magick.rb in the MiniMagick Gem 1.3.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

Vulnerable Systems

Application

  • Rubygems Mini Magick 1.3.1


References

OSVDB - 91231

MLIST - [oss-security] 20130319 Fwd: CVE requests

FULLDISC - 20130312 MiniMagic ruby gem remote code execution

MISC - http://packetstormsecurity.com/files/120777/Ruby-Gem-Minimagic-Command-Execution.html


Last Updated: 27 May 2016 10:47:24