CVE-2005-2337

Published: Oct 7, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when Ruby processes a program through standard input (stdin).

Affected (12)

Products: Yukihiro Matsumoto: Ruby

Yukihiro Matsumoto

1 product

Ruby

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Yukihiro Matsumoto Ruby	Version 1.6.1
Yukihiro Matsumoto Ruby	Version 1.6.2
Yukihiro Matsumoto Ruby	Version 1.6.3
Yukihiro Matsumoto Ruby	Version 1.6.4
Yukihiro Matsumoto Ruby	Version 1.6.5
Yukihiro Matsumoto Ruby	Version 1.6.6
Yukihiro Matsumoto Ruby	Version 1.6.7
Yukihiro Matsumoto Ruby	Version 1.6
Yukihiro Matsumoto Ruby	Version 1.8.1
Yukihiro Matsumoto Ruby	Version 1.8.2_pre1
Yukihiro Matsumoto Ruby	Version 1.8.2_pre2
Yukihiro Matsumoto Ruby	Version 1.8

References (56)

http://jvn.jp/jp/JVN%2362914675/index.html

Source: cret@cert.org

http://lists.apple.com/archives/security-announce/2006/May/msg00003.html

Source: cret@cert.org

http://secunia.com/advisories/16904

Source: cret@cert.org

PatchVendor Advisory

http://secunia.com/advisories/17094

Source: cret@cert.org

http://secunia.com/advisories/17098

Source: cret@cert.org

Vendor Advisory

http://secunia.com/advisories/17129

Source: cret@cert.org

Vendor Advisory

http://secunia.com/advisories/17147

Source: cret@cert.org

Vendor Advisory

http://secunia.com/advisories/17285

Source: cret@cert.org

Vendor Advisory

http://secunia.com/advisories/19130

Source: cret@cert.org

Vendor Advisory

http://secunia.com/advisories/20077

Source: cret@cert.org

Vendor Advisory

http://securityreason.com/securityalert/59

Source: cret@cert.org

http://www.debian.org/security/2005/dsa-860

Source: cret@cert.org

http://www.debian.org/security/2005/dsa-862

Source: cret@cert.org

http://www.debian.org/security/2005/dsa-864

Source: cret@cert.org

Vendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200510-05.xml

Source: cret@cert.org

http://www.kb.cert.org/vuls/id/160012

Source: cret@cert.org

Third Party AdvisoryUS Government Resource

http://www.mandriva.com/security/advisories?name=MDKSA-2005:191

Source: cret@cert.org

Vendor Advisory

http://www.novell.com/linux/security/advisories/2006_05_sr.html

Source: cret@cert.org

http://www.redhat.com/support/errata/RHSA-2005-799.html

Source: cret@cert.org

http://www.ruby-lang.org/en/20051003.html

Source: cret@cert.org

PatchVendor Advisory

http://www.securityfocus.com/bid/14909

Source: cret@cert.org

http://www.securityfocus.com/bid/17951

Source: cret@cert.org

http://www.securitytracker.com/alerts/2005/Sep/1014948.html

Source: cret@cert.org

http://www.ubuntu.com/usn/usn-195-1

Source: cret@cert.org

http://www.us-cert.gov/cas/techalerts/TA06-132A.html

Source: cret@cert.org

US Government Resource

http://www.vupen.com/english/advisories/2006/1779

Source: cret@cert.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/22360

Source: cret@cert.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10564

Source: cret@cert.org

http://jvn.jp/jp/JVN%2362914675/index.html