NVD

Id
7777  
Name
CVE-2011-0739  
Description
The deliver function in the sendmail delivery agent (lib/mail/network/delivery_methods/sendmail.rb) in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-02-01  
Modified Date
2011-02-03  
Seq
2011-0739  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
44250 7777 CVE-2011-0739 http://groups.google.com/group/mail-ruby/browse_thread/thread/e93bbd05706478dd?pli=1  View
44251 7777 CVE-2011-0739 46021  View
44252 7777 CVE-2011-0739 ADV-2011-0233  View
44253 7777 CVE-2011-0739 ruby-mail-deliver-command-execution(65010)  View
44254 7777 CVE-2011-0739 https://github.com/mikel/mail/raw/master/patches/20110126_sendmail.patch  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33989 JVNDB-2011-004231 Ruby Mail gem の sendmail delivery agent の deliver 関数における任意のコマンドを実行される脆弱性 Ruby Mail gem の sendmail delivery agent (lib/mail/network/delivery_methods/sendmail.rb) の deliver 関数には、任意のコマンドを実行される脆弱性が存在します。 CVE-2011-0739 48646 CVE-2011-0739 7777 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004231.html 2011-02-01 2012-03-27 View