NVD

Id
43988  
Name
CVE-2012-2140  
Description
The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2012-07-18  
Modified Date
2012-10-30  
Seq
2012-2140  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
221082 43988 CVE-2012-2140 FEDORA-2012-7692  View
221083 43988 CVE-2012-2140 FEDORA-2012-7535  View
221084 43988 CVE-2012-2140 FEDORA-2012-7619  View
221085 43988 CVE-2012-2140 [oss-security] 20120425 CVE request: two flaws fixed in rubygem-mail 2.4.4  View
221086 43988 CVE-2012-2140 [oss-security] 20120425 Re: CVE request: two flaws fixed in rubygem-mail 2.4.4  View
221087 43988 CVE-2012-2140 https://bugzilla.novell.com/show_bug.cgi?id=759092  View
221088 43988 CVE-2012-2140 https://bugzilla.redhat.com/show_bug.cgi?id=816352  View
221089 43988 CVE-2012-2140 https://github.com/mikel/mail/blob/9beb079c70d236a5ad2e1ba95b2c977e55deb7af/CHANGELOG.rdoc  View
221090 43988 CVE-2012-2140 https://github.com/mikel/mail/commit/39b590ddb08f90ddbe445837359a2c8843e533d0  View
221091 43988 CVE-2012-2140 https://github.com/mikel/mail/commit/ac56f03bdfc30b379aeecd4ff317d08fdaa328c2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27521 JVNDB-2012-003228 Ruby 用 Mail gem における任意のコマンドを実行される脆弱性 Ruby 用 Mail gem には、任意のコマンドを実行される脆弱性が存在します。 CVE-2012-2140 55378 CVE-2012-2140 43988 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003228.html 2012-07-18 2012-11-13 View