Contents

--- 
gem: mail
cve: 2012-2140
osvdb: 81632
url: http://www.osvdb.org/show/osvdb/81632
title: Mail Gem for Ruby Multiple Delivery Method Remote Shell Command Execution
date: 2012-03-14

description: |
  Mail Gem for Ruby contains a flaw that occurs within the sendmail and exim
  delivery methods, which may allow an attacker to execute arbitrary shell
  commands..

cvss_v2: 7.5
patched_versions: 
- ">= 2.4.4"

Version data entries

14 entries across 14 versions & 3 rubygems

Version	Path
bundler-budit-0.6.2	data/ruby-advisory-db/gems/mail/OSVDB-81632.yml
bundler-budit-0.6.1	data/ruby-advisory-db/gems/mail/OSVDB-81632.yml
bundler-audit-0.6.1	data/ruby-advisory-db/gems/mail/OSVDB-81632.yml
bundler-audit-0.6.0	data/ruby-advisory-db/gems/mail/OSVDB-81632.yml
bundler-audit-0.5.0	data/ruby-advisory-db/gems/mail/OSVDB-81632.yml
bundler-audit-0.4.0	data/ruby-advisory-db/gems/mail/OSVDB-81632.yml
bundler-audit-0.3.1	data/ruby-advisory-db/gems/mail/OSVDB-81632.yml
mrjoy-bundler-audit-0.3.3	data/ruby-advisory-db/gems/mail/OSVDB-81632.yml
mrjoy-bundler-audit-0.3.2	data/ruby-advisory-db/gems/mail/OSVDB-81632.yml
mrjoy-bundler-audit-0.3.1	data/ruby-advisory-db/gems/mail/OSVDB-81632.yml
bundler-audit-0.3.0	data/ruby-advisory-db/gems/mail/OSVDB-81632.yml
mrjoy-bundler-audit-0.2.1	data/ruby-advisory-db/gems/mail/OSVDB-81632.yml
bundler-audit-0.2.0	data/ruby-advisory-db/gems/mail/OSVDB-81632.yml
mrjoy-bundler-audit-0.1.4	data/ruby-advisory-db/gems/mail/OSVDB-81632.yml