Mail Gem Path Traversal vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2012-2139 · ADVISORY
• mikel/mail commit 29aca25 · WEB
• bugzilla.novell.com/show_bug.cgi · WEB
• bugzilla.redhat.com/show_bug.cgi · WEB
• mikel/mail · PACKAGE
• lists.fedoraproject.org/pipermail/package-announce/2012-May/080645.html · WEB
• lists.fedoraproject.org/pipermail/package-announce/2012-May/080648.html · WEB
• lists.fedoraproject.org/pipermail/package-announce/2012-May/080747.html · WEB
• openwall.com/lists/oss-security/2012/04/25/8 · WEB
• openwall.com/lists/oss-security/2012/04/26/1 · WEB
• secunia.com/advisories/48970 · Vendor Advisory

mail의 다른 취약점

• CVE-2026-63435보통 5.3Mail is an internet library for Ruby designed to handle email generation, parsing, and sending. Prior to 2.9.1, Mail::Utilities.q_value_deco…
• CVE-2015-9097보통 6.1The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO …
• CVE-2012-2140높음 7.5The Mail gem before 2.4.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a (1) sendmail or (2) e…
• CVE-2011-0739보통 6.8The deliver function in the sendmail delivery agent (lib/mail/network/delivery_methods/sendmail.rb) in Ruby Mail gem 2.2.14 and earlier allo…