NVD

Id
41479  
Name
CVE-2013-6421  
Description
The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a (1) filename or (2) path.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-12-12  
Modified Date
2013-12-19  
Seq
2013-6421  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
209584 41479 CVE-2013-6421 20131214 Command injection vulnerability in Ruby Gem sprout 0.7.246  View
209585 41479 CVE-2013-6421 http://vapid.dhs.org/advisories/sprout-0.7.246-command-inj.html  View
209586 41479 CVE-2013-6421 [oss-security] 20131202 Command injection vulnerability in Ruby Gem sprout 0.7.246  View
209587 41479 CVE-2013-6421 [oss-security] 20131202 Re: Command injection vulnerability in Ruby Gem sprout 0.7.246  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23937 JVNDB-2013-005512 Ruby 用 sprout gem の archive_unpacker.rb における任意のコマンドを実行される脆弱性 Ruby 用 sprout gem の archive_unpacker.rb 内の unpack_zip 関数には、任意のコマンドを実行される脆弱性が存在します。 CVE-2013-6421 66363 CVE-2013-6421 41479 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005512.html 2013-12-02 2013-12-16 View