CVE-2012-4522: Medium severity ruby vulnerability
The rbgetpathcheck function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4522?
CVE-2012-4522 has a medium severity rating, allowing attackers to exploit file creation vulnerabilities.
How do I fix CVE-2012-4522?
To fix CVE-2012-4522, update Ruby to version 1.9.3 patchlevel 286 or later, or 2.0.0 revision r37163 or later.
What are the implications of CVE-2012-4522?
Exploitation of CVE-2012-4522 can lead to the creation of files in unexpected locations, potentially compromising system integrity.
Which versions of Ruby are affected by CVE-2012-4522?
CVE-2012-4522 affects Ruby versions 1.9.3 prior to patchlevel 286 and 2.0.0 prior to r37163.
Can CVE-2012-4522 be exploited remotely?
CVE-2012-4522 requires context-dependent access, meaning it cannot be exploited remotely without specific conditions.