NVD

Id
36617  
Name
CVE-2013-0262  
Description
rack/file.rb (Rack::File) in Rack 1.5.x before 1.5.2 and 1.4.x before 1.4.5 allows attackers to access arbitrary files outside the intended root directory via a crafted PATH_INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, aka "symlink path traversals."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-02-08  
Modified Date
2013-05-14  
Seq
2013-0262  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
187114 36617 CVE-2013-0262 openSUSE-SU-2013:0462  View
187115 36617 CVE-2013-0262 http://rack.github.com/  View
187116 36617 CVE-2013-0262 https://bugzilla.redhat.com/show_bug.cgi?id=909071  View
187117 36617 CVE-2013-0262 https://bugzilla.redhat.com/show_bug.cgi?id=909072  View
187118 36617 CVE-2013-0262 https://gist.github.com/rentzsch/4736940  View
187119 36617 CVE-2013-0262 https://github.com/rack/rack/blob/master/lib/rack/file.rb#L56  View
187120 36617 CVE-2013-0262 https://github.com/rack/rack/commit/6f237e4c9fab649d3750482514f0fde76c56ab30  View
187121 36617 CVE-2013-0262 https://groups.google.com/forum/#!msg/rack-devel/bf937jPZxJM/1s6x95vIhmAJ  View
187122 36617 CVE-2013-0262 https://groups.google.com/forum/#!msg/rack-devel/mZsuRonD7G8/DpZIOmMLbOgJ  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19880 JVNDB-2013-001455 Rack の rack/file.rb における任意のファイルにアクセスされる脆弱性 Rack の rack/file.rb (Rack::File) には、ルートディレクトリ以外の任意のファイルにアクセスされる脆弱性が存在します。 CVE-2013-0262 60204 CVE-2013-0262 36617 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001455.html 2013-02-07 2013-05-20 View