JVNDB-2011-000005

Ruby Version Manager escape sequence injection vulnerability

Ruby Version Manager contains an escape sequence injection vulnerability.

Ruby Version Manager is a command line tool for managing multiple ruby environments. Ruby Version Manager contains an escape sequence injection vulnerability.

Base Metrics: 4.3 (Medium) [IPA Score]

• Access Vector: Network
• Access Complexity: Medium
• Authentication: None
• Confidentiality Impact: None
• Integrity Impact: Partial
• Availability Impact: None

Ruby Version Manager (RVM)

• Ruby Version Manager (RVM) prior to 1.2.1

A user may unknowingly open a malicious file. As a result, the string that is output on the terminal may contain an arbitrary escape sequence.

[Update the software]
Update to the latest version according to the information provided by the developer.

Ruby Version Manager (RVM)

• RVM : Ruby Version Manager (RVM)

1. Improper Input Validation(CWE-20) [IPA Evaluation]

1. CVE-2010-3928

1. JVN : JVN#30414126
2. National Vulnerability Database (NVD) : CVE-2010-3928
3. Secunia Advisory : SA42952
4. SecurityFocus : 45841
5. ISS X-Force Database : 64746
6. VUPEN Security : VUPEN/ADV-2011-0174
7. OPEN SOURCE VULNERABILITY DATABASE (OSVDB) : 70521

[2011/01/18]
  Web page published