NVD

Id
45901  
Name
CVE-2012-4522  
Description
The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-11-24  
Modified Date
2013-05-03  
Seq
2012-4522  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
230493 45901 CVE-2012-4522 FEDORA-2012-16071  View
230494 45901 CVE-2012-4522 FEDORA-2012-16086  View
230495 45901 CVE-2012-4522 RHSA-2013:0129  View
230496 45901 CVE-2012-4522 http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=37163  View
230497 45901 CVE-2012-4522 [oss-security] 20121012 CVE request: ruby file creation due in insertion of illegal NUL character  View
230498 45901 CVE-2012-4522 [oss-security] 20121013 Re: CVE request: ruby file creation due in insertion of illegal NUL character  View
230499 45901 CVE-2012-4522 [oss-security] 20121016 Re: CVE request: ruby file creation due in insertion of illegal NUL character  View
230500 45901 CVE-2012-4522 http://www.ruby-lang.org/en/news/2012/10/12/poisoned-NUL-byte-vulnerability/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29827 JVNDB-2012-005534 Ruby の file.c におけるファイルを作成される脆弱性 Ruby の file.c 内の rb_get_path_check 関数には、想定外のロケーション内に、想定外の名称を持つファイルを作成される脆弱性が存在します。 CVE-2012-4522 57760 CVE-2012-4522 45901 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005534.html 2012-10-12 2012-11-27 View