Lucene search
GoogleOSV:GHSA-CPJC-P7FC-J9XHHistoryOct 24, 2017 - 6:33 p.m.
Mail Improper Input Validation vulnerability
2017-10-2418:33:38
Google
osv.dev
11
0.013 Low
EPSS
Percentile
85.7%
The deliver function in the sendmail delivery agent (lib/mail/network/delivery_methods/sendmail.rb) in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address.
References
groups.google.com/group/mail-ruby/browse_thread/thread/e93bbd05706478dd?pli=1
exchange.xforce.ibmcloud.com/vulnerabilities/65010
github.com/mikel/mail
github.com/mikel/mail/raw/master/patches/20110126_sendmail.patch
github.com/rubysec/ruby-advisory-db/blob/master/gems/mail/CVE-2011-0739.yml
nvd.nist.gov/vuln/detail/CVE-2011-0739
web.archive.org/web/20200228225346/www.securityfocus.com/bid/46021
Related
openvas
openvas
FreeBSD Ports: rubygem-mail
2011-03-05 00:00:00
FreeBSD Ports: rubygem-mail
2011-03-05 00:00:00
github
github
Mail Improper Input Validation vulnerability
2017-10-24 18:33:38
prion
prion
Code injection
2011-02-02 01:00:00
cve
cve
CVE-2011-0739
2011-02-02 01:00:07
cvelist
cvelist
CVE-2011-0739
2011-02-02 00:00:00
freebsd
freebsd
rubygem-mail -- Remote Arbitrary Shell Command Injection Vulnerability
2011-01-25 00:00:00
nessus
nessus
nvd
nvd
CVE-2011-0739
2011-02-02 01:00:07