Remote Command Execution in Ruby Mail Gem Affecting Sendmail Delivery Agent
CVE-2011-0739

Currently unrated

Key Information:

Vendor: Mikel Lindsaar
Status: Mail
Vendor: CVE Published:; 2 February 2011

🔔 Create Mikel Lindsaar Vulnerability Alert

What is CVE-2011-0739?

The Ruby Mail gem contains a vulnerability within the sendmail delivery agent which permits remote attackers to execute arbitrary commands. This is achieved through the injection of shell metacharacters within an email address, enabling unauthorized command execution in systems utilizing affected versions of the library. It is crucial for developers and system administrators to apply security patches and validate input thoroughly to mitigate risks associated with this vulnerability.

References

http://www.vupen.com/english/advisories/2011/0233

vdb-entryx_refsource_VUPEN

http://groups.google.com/group/mail-ruby/browse_thread/th...

x_refsource_CONFIRM

https://exchange.xforce.ibmcloud.com/vulnerabilities/65010

vdb-entryx_refsource_XF

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Feb 2, 2011
Vulnerability Reserved
Feb 1, 2011

CVE-2011-0739 Data

JSON