NVD

Id
38046  
Name
CVE-2013-1911  
Description
lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-04-02  
Modified Date
2013-04-03  
Seq
2013-1911  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
194381 38046 CVE-2013-1911 20130401 Remote command execution in Ruby Gem ldoce 0.0.2  View
194382 38046 CVE-2013-1911 http://otiose.dhs.org/advisories/ldoce-0.0.2-cmd-exec.html  View
194383 38046 CVE-2013-1911 [oss-security] 20130331 Re: Remote command execution in Ruby Gem ldoce 0.0.2  View
194384 38046 CVE-2013-1911 58783  View
194385 38046 CVE-2013-1911 rubygem-cve20131911-command-exec(83163)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20563 JVNDB-2013-002138 Ruby 用 ldoce における任意のコマンドを実行される脆弱性 Ruby 用 ldoce gem の lib/ldoce/word.rb には、任意のコマンドを実行される脆弱性が存在します。 CVE-2013-1911 61853 CVE-2013-1911 38046 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002138.html 2013-03-25 2013-04-04 View