(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent attackers to bypass intended $SAFE level restrictions.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2013-11-02T19:00:00
Updated: 2018-01-08T21:57:01
Reserved: 2013-02-19T00:00:00
Link: CVE-2013-2065
JSON object: View
NVD Information
Status : Modified
Published: 2013-11-02T19:55:04.430
Modified: 2018-10-30T16:27:34.373
Link: CVE-2013-2065
JSON object: View
Redhat Information
No data.
CWE