backup_checksum Gem for Ruby /lib/backup/cli/utility.rb Metacharacter Handling Remote Command Execution
Published: June 30, 2014
SECURITY IDENTIFIERS
- OSVDB: OSVDB-108570
- Vendor Advisory: https://www.openwall.com/lists/oss-security/2014/07/07/12
GEM
PATCHED VERSIONS
None available.
DESCRIPTION
backup_checksum Gem for Ruby contains a flaw in /lib/backup/cli/utility.rb that is triggered when handling metacharacters. This may allow a remote attacker to execute arbitrary commands.