CVE-2005-2337
Fixed in a distro release EPSS 3%
Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when Ruby processes a program through standard input (stdin).
Products: yukihiro_matsumoto ruby
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | ruby | 1.6.7-3woody5 |
| Debian 3.1 | ruby1.6 | 1.6.8-12sarge1 |
| Debian 3.1 | ruby1.8 | 1.8.2-7sarge2 |
| Red Hat Enterprise Linux 3 | irb | 0:1.6.8-9.EL3.4 |
| Red Hat Enterprise Linux 3 | ruby | 0:1.6.8-9.EL3.4 |
| Red Hat Enterprise Linux 3 | ruby-debuginfo | 0:1.6.8-9.EL3.4 |
| Red Hat Enterprise Linux 3 | ruby-devel | 0:1.6.8-9.EL3.4 |
| Red Hat Enterprise Linux 3 | ruby-docs | 0:1.6.8-9.EL3.4 |
| Red Hat Enterprise Linux 3 | ruby-libs | 0:1.6.8-9.EL3.4 |
| Red Hat Enterprise Linux 3 | ruby-mode | 0:1.6.8-9.EL3.4 |
| Red Hat Enterprise Linux 3 | ruby-tcltk | 0:1.6.8-9.EL3.4 |
| Red Hat Enterprise Linux 4 | irb | 0:1.8.1-7.EL4.2 |
| Red Hat Enterprise Linux 4 | ruby | 0:1.8.1-7.EL4.2 |
| Red Hat Enterprise Linux 4 | ruby-debuginfo | 0:1.8.1-7.EL4.2 |
| Red Hat Enterprise Linux 4 | ruby-devel | 0:1.8.1-7.EL4.2 |
| Red Hat Enterprise Linux 4 | ruby-docs | 0:1.8.1-7.EL4.2 |
| Red Hat Enterprise Linux 4 | ruby-libs | 0:1.8.1-7.EL4.2 |
| Red Hat Enterprise Linux 4 | ruby-mode | 0:1.8.1-7.EL4.2 |
| Red Hat Enterprise Linux 4 | ruby-tcltk | 0:1.8.1-7.EL4.2 |