RubyGems file overwrite vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2007-0469 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/31688 · WEB
• rubygems/rubygems · PACKAGE
• web.archive.org/web/20070210090150/http://rubyforge.org/frs/shownotes.php · WEB
• web.archive.org/web/20201207172116/http://www.securityfocus.com/archive/1/458128/100/0/threaded · WEB
• marc.info · WEB
• novell.com/linux/security/advisories/2007_4_sr.html · WEB
• rubyforge.org/frs/shownotes.php · Patch
• securityfocus.com/archive/1/458128/100/0/threaded
• vupen.com/english/advisories/2007/0295

rubygems-update のその他の脆弱性

• CVE-2019-8323高 7.5An issue was discovered in RubyGems 2.6 and later through 3.0.2. Gem::GemcutterUtilities#with_response may output the API response to stdout…
• CVE-2019-8322高 7.5An issue was discovered in RubyGems 2.6 and later through 3.0.2. The gem owner command outputs the contents of the API response directly to …
• CVE-2019-8321高 7.5An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::UserInteraction#verbose calls say without escaping, escape seque…
• CVE-2019-8325高 7.5An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManager#run calls alert_error without escaping, escape se…
• CVE-2019-8324高 8.8An issue was discovered in RubyGems 2.6 and later through 3.0.2. A crafted gem with a multi-line name is not handled correctly. Therefore, a…