Contents

---
gem: karo
osvdb: 108573
url: http://osvdb.org/show/osvdb/108573
title: karo Gem for Ruby db.rb Metacharacter Handling Remote Command Execution
date: 2014-06-30
description: |
  karo Gem for Ruby contains a flaw in db.rb that is triggered when handling
  metacharacters. This may allow a remote attacker to execute arbitrary
  commands.

Version data entries

6 entries across 6 versions & 2 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/karo/OSVDB-108573.yml
bundler-budit-0.6.2	data/ruby-advisory-db/gems/karo/OSVDB-108573.yml
bundler-budit-0.6.1	data/ruby-advisory-db/gems/karo/OSVDB-108573.yml
bundler-audit-0.6.1	data/ruby-advisory-db/gems/karo/OSVDB-108573.yml
bundler-audit-0.6.0	data/ruby-advisory-db/gems/karo/OSVDB-108573.yml
bundler-audit-0.5.0	data/ruby-advisory-db/gems/karo/OSVDB-108573.yml