ADVISORIES

• OSVDB-108570
• Vendor Advisory

GEM

backup_checksum

PATCHED VERSIONS

None.

DESCRIPTION

backup_checksum Gem for Ruby contains a flaw in /lib/backup/cli/utility.rb that is triggered when handling metacharacters. This may allow a remote attacker to execute arbitrary commands.

RELATED

• https://www.openwall.com/lists/oss-security/2014/07/07/12
• https://my.diffend.io/gems/backup_checksum/3.0.23
• https://github.com/backup/backup
• http://osvdb.org/show/osvdb/108570