Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2011-0739
6.8
MEDIUMCVSS v2
Published
February 2, 2011
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
The deliver function in the sendmail delivery agent (lib/mail/network/delivery_methods/sendmail.rb) in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address.
mikel/mail
GitHubA Really Ruby Mail Library
GitHubA Really Ruby Mail Library= 1.4.3, = 1.2.8, = 2.2.5.1, = 2.2.4, = 2.2.5, = 1.3.1, = 1.5.1, = 2.1.5.2, = 2.1.1, = 2.2.10, = 2.1.3, = 1.5.3, = 1.3.5, = 1.3.4, = 1.2.7, = 1.6.0, = 1.4.2, = 1.4.0, = 1.2.9, = 2.2.6, = 2.2.0, = 2.1.0, = 2.0.3, = 1.1.0, = 1.5.0, = 1.3.3, = 1.2.5, = 2.2.12, = 2.2.11, = 2.2.5.2, = 2.1.5.1, = 2.2.9.1, = 2.2.3, = 2.1.5, = 1.5.2, = 1.2.6, = 1.5.4, = 1.4.1, <= 2.2.14, = 2.2.13, = 2.2.6.1, = 2.1.5.3, = 2.0.5, = 1.3.0, = 1.0.0, = 2.2.9, = 2.2.7, = 2.2.2, = 2.2.1, = 2.1.2, = 1.3.2, = 1.2.1NVD