Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistRedhatCVELIST:CVE-2012-4466
HistoryApr 25, 2013 - 11:00 p.m.

CVE-2012-4466

2013-04-2523:00:00
redhat
www.cve.org
2

6.7 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.3%

JSON

Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the name_err_mesg_to_str API function, which marks the string as tainted, a different vulnerability than CVE-2011-1005.

Related

seebug 1
prion 4
nessus 46
openvas 65
amazon 2
ubuntucve 4
nvd 4
cve 4
rubygems 4
cvelist 3
fedora 9
veracode 4
freebsd 1
ubuntu 6
securityvulns 5
redhat 6
centos 4
oraclelinux 4
gentoo 1
seebug
seebug
Ruby 安全级别限制绕过漏洞(CVE-2012-4466)
2013-04-28 00:00:00
prion
prion
Code injection
2013-04-25 23:55:00
Design/Logic Flaw
2013-04-25 23:55:00
Design/Logic Flaw
2011-03-02 20:00:00
nessus
nessus
Amazon Linux AMI : ruby (ALAS-2012-139)
2013-09-04 00:00:00
Fedora 16 : ruby-1.8.7.358-4.fc16 (2012-15507)
2012-10-15 00:00:00
Ubuntu 12.04 LTS : ruby1.9.1 vulnerabilities (USN-1602-1)
2012-10-11 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2012-139)
2015-09-08 00:00:00
Fedora Update for ruby FEDORA-2012-15507
2012-10-16 00:00:00
Fedora Update for ruby FEDORA-2012-15507
2012-10-16 00:00:00
amazon
amazon
Medium: ruby
2012-10-23 10:43:00
Medium: ruby
2013-03-14 22:04:00
ubuntucve
ubuntucve
CVE-2012-4466
2012-10-03 00:00:00
CVE-2012-4464
2012-10-03 00:00:00
CVE-2011-1005
2011-03-02 00:00:00
nvd
nvd
CVE-2012-4466
2013-04-25 23:55:01
CVE-2012-4464
2013-04-25 23:55:01
CVE-2011-1005
2011-03-02 20:00:01
cve
cve
CVE-2012-4466
2013-04-25 23:55:01
CVE-2012-4464
2013-04-25 23:55:01
CVE-2011-1005
2011-03-02 20:00:01
rubygems
rubygems
Ruby Exception#to_s / NameError#to_s Methods Safe Level Security Bypass
2012-10-11 20:00:00
CVE-2011-1005 Ruby: Untrusted codes able to modify arbitrary strings
2011-02-17 21:00:00
Ruby name_err_mesg_to_str Method Safe Level Security Bypass
2012-10-11 20:00:00
cvelist
cvelist
CVE-2012-4464
2013-04-25 23:00:00
CVE-2011-1005
2011-03-02 19:00:00
CVE-2012-4481
2013-05-02 14:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: ruby-1.8.7.358-4.fc16
2012-10-14 03:52:43
[SECURITY] Fedora 18 Update: ruby-1.9.3.194-18.fc18
2012-10-09 00:29:34
[SECURITY] Fedora 17 Update: ruby-1.9.3.194-17.fc17
2012-10-14 03:50:48
veracode
veracode
Authorization Bypass
2019-05-02 04:53:43
Access Control Bypass
2020-04-10 00:59:04
Unauthorized Modification
2019-01-15 08:52:55
freebsd
freebsd
ruby -- $SAFE escaping vulnerability about Exception#to_s/NameError#to_s
2012-08-21 00:00:00
ubuntu
ubuntu
Ruby vulnerabilities
2012-10-10 00:00:00
Ruby vulnerabilities
2012-10-23 00:00:00
Ruby vulnerabilities
2012-10-10 00:00:00
securityvulns
securityvulns
Ruby restrictions bypass
2012-10-15 00:00:00
[USN-1603-1] Ruby vulnerabilities
2012-10-15 00:00:00
ruby multiple security vulnerabilities
2011-05-25 00:00:00
redhat
redhat
(RHSA-2011:0910) Moderate: ruby security update
2011-06-28 00:00:00
(RHSA-2013:0612) Moderate: ruby security update
2013-03-07 00:00:00
(RHSA-2013:0129) Moderate: ruby security and bug fix update
2013-01-08 00:00:00
centos
centos
ruby security update
2013-01-09 20:36:59
ruby security update
2013-03-09 00:47:26
irb, ruby security update
2011-08-14 21:12:51
oraclelinux
oraclelinux
ruby security update
2011-06-28 00:00:00
ruby security update
2011-06-28 00:00:00
ruby security, bug fix, and enhancement update
2011-12-14 00:00:00
gentoo
gentoo
Ruby: Denial of service
2014-12-13 00:00:00

6.7 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.3%

JSON
Related for CVELIST:CVE-2012-4466
seebug1prion4nessus46openvas65amazon2ubuntucve4nvd4cve4rubygems4cvelist3fedora9veracode4freebsd1ubuntu6securityvulns5redhat6centos4oraclelinux4gentoo1