CVE-2013-4389: Medium severity ruby on rails vulnerability
Multiple format string vulnerabilities in logsubscriber.rb files in the log subscriber component in Action Mailer in Ruby on Rails 3.x before 3.2.15 allow remote attackers to cause a denial of service via a crafted e-mail address that is improperly handled during construction of a log message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4389?
CVE-2013-4389 is considered a high severity vulnerability as it can lead to denial of service for affected systems.
How do I fix CVE-2013-4389?
To fix CVE-2013-4389, upgrade to Action Mailer version 3.2.15 or later.
What software is affected by CVE-2013-4389?
CVE-2013-4389 affects Ruby on Rails 3.x versions prior to 3.2.15, as well as specific versions of OpenSUSE and Debian.
Can CVE-2013-4389 be exploited remotely?
Yes, CVE-2013-4389 can be exploited remotely through crafted email addresses.
What component of Ruby on Rails is vulnerable in CVE-2013-4389?
The vulnerability in CVE-2013-4389 exists in the log_subscriber component of Action Mailer.