CVE-2013-4203

State: Published
Severity: Not scored
Published: Oct 11, 2013
Updated: Sep 16, 2024
Reserved: Jun 12, 2013

Description

The self.run_gpg function in lib/rgpg/gpg_helper.rb in the rgpg gem before 0.2.3 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

[oss-security] 20130802 Re: Rgpg Ruby Gem Remote Command Injection (CVE Request)mailing-list
https://github.com/rcook/rgpg/commit/b819b13d198495f3ecd2762a0dbe27bb6fae3505

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.