CVE-2012-2140 PUBLISHED

Reported by redhat · Published July 18, 2012

The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) exim delivery.

Affected Products

VendorProductVersions
n/an/an/a
RubyGemsmail2.3.2, 2.3.2
n/an/an/a, n/a

Timeline

References

Open in Interactive Console →