The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic.
References
Link | Resource |
---|---|
http://vapidlabs.com/advisory.php?v=34 | Exploit Third Party Advisory |
Configurations
Information
Published : 2021-01-26 15:15
Updated : 2021-02-04 07:00
NVD link : CVE-2013-2512
Mitre link : CVE-2013-2512
JSON object : View
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Products Affected
ftpd_project
- ftpd