Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2013-2617

Overview

Vulnerability Score 7.5 7.5
CVE Id CVE-2013-2617
Last Modified 21 Mar 2013 02:35:03
Published 20 Mar 2013 06:55:01
Confidentiality Impact PARTIAL PARTIAL
Integrity Impact PARTIAL PARTIAL
Availability Impact PARTIAL PARTIAL
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2013-2617

Summary

lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

Vulnerable Systems

Application

  • Rubygems Curl -


References

OSVDB - 91230

MLIST - [oss-security] 20130319 Fwd: CVE requests

FULLDISC - 20130312 Curl Ruby Gem Remote command execution

MISC - http://packetstormsecurity.com/files/120778/Ruby-Gem-Curl-Command-Execution.html


Last Updated: 27 May 2016 10:47:24