Vulnerability Details : CVE-2012-2139
Potential exploit
Directory traversal vulnerability in lib/mail/network/delivery_methods/file_delivery.rb in the Mail gem before 2.4.4 for Ruby allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter.
Vulnerability category: Directory traversal
Products affected by CVE-2012-2139
- cpe:2.3:a:rubygems:mail_gem:*:*:*:*:*:*:*:*
- cpe:2.3:a:rubygems:mail_gem:2.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:rubygems:mail_gem:2.3.3:*:*:*:*:*:*:*
- cpe:2.3:a:rubygems:mail_gem:2.3.2:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2012-2139
3.18%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 91 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2012-2139
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
CWE ids for CVE-2012-2139
-
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-2139
-
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080648.html
[SECURITY] Fedora 16 Update: rubygem-actionmailer-3.0.10-2.fc16
-
https://bugzilla.redhat.com/show_bug.cgi?id=816352
816352 – (CVE-2012-2140) CVE-2012-2140 rubygem-mail: arbitrary command execution when using exim or sendmail from commandline
-
https://github.com/mikel/mail/commit/29aca25218e4c82991400eb9b0c933626aefc98f
Preventing file system traversal in file_delivery method · mikel/mail@29aca25 · GitHubExploit;Patch
-
http://www.openwall.com/lists/oss-security/2012/04/25/8
oss-security - CVE request: two flaws fixed in rubygem-mail 2.4.4
-
http://www.openwall.com/lists/oss-security/2012/04/26/1
oss-security - Re: CVE request: two flaws fixed in rubygem-mail 2.4.4
-
https://bugzilla.novell.com/show_bug.cgi?id=759092
Bug 759092 – VUL-0: rubygem-mail: various security fixes mentioned in changelog
-
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080747.html
[SECURITY] Fedora 17 Update: rubygem-actionmailer-3.0.11-2.fc17
-
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080645.html
[SECURITY] Fedora 15 Update: rubygem-actionmailer-3.0.5-3.fc15
Jump to