CVE-2013-0162

Published: Mar 1, 2013Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

Affected (29)

Products: Ryan Davis: Ruby Parser

Ryan Davis

1 product

Ruby Parser

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Ryan Davis Ruby Parser	version ≤ 3.1.1
Ryan Davis Ruby Parser	Version 1.0.0
Ryan Davis Ruby Parser	Version 2.0.0
Ryan Davis Ruby Parser	Version 2.0.1
Ryan Davis Ruby Parser	Version 2.0.2
Ryan Davis Ruby Parser	Version 2.0.3
Ryan Davis Ruby Parser	Version 2.0.4
Ryan Davis Ruby Parser	Version 2.0.5
Ryan Davis Ruby Parser	Version 2.0.6
Ryan Davis Ruby Parser	Version 2.1.0
Ryan Davis Ruby Parser	Version 2.2.0
Ryan Davis Ruby Parser	Version 2.3.0
Ryan Davis Ruby Parser	Version 2.3.1
Ryan Davis Ruby Parser	Version 3.0.0.a10
Ryan Davis Ruby Parser	Version 3.0.0.a1
Ryan Davis Ruby Parser	Version 3.0.0.a2
Ryan Davis Ruby Parser	Version 3.0.0.a3
Ryan Davis Ruby Parser	Version 3.0.0.a4
Ryan Davis Ruby Parser	Version 3.0.0.a5
Ryan Davis Ruby Parser	Version 3.0.0.a6
Ryan Davis Ruby Parser	Version 3.0.0.a7
Ryan Davis Ruby Parser	Version 3.0.0.a8
Ryan Davis Ruby Parser	Version 3.0.0.a9
Ryan Davis Ruby Parser	Version 3.0.0
Ryan Davis Ruby Parser	Version 3.0.1
Ryan Davis Ruby Parser	Version 3.0.2
Ryan Davis Ruby Parser	Version 3.0.3
Ryan Davis Ruby Parser	Version 3.0.4
Ryan Davis Ruby Parser	Version 3.1.0