CVE-2009-5147

DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before patchlevel 648, and 2.1 before 2.1.8 opens libraries with tainted names.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ruby-lang:ruby:1.8.0:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.9.0:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.9.2:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:1.9.3:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.0.0:p195:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.0.0:p247:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.0.0:p353:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.0.0:p481:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.0.0:p576:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.0.0:p594:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.0.0:p598:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.0.0:p643:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.0.0:p645:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.0.0:p647:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.1.1:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.1.2:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.1.3:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.1.4:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.1.5:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.1.6:*:*:*:*:*:*:*
cpe:2.3:a:ruby-lang:ruby:2.1.7:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-03-29 14:59

Updated : 2024-02-04 19:11


NVD link : CVE-2009-5147

Mitre link : CVE-2009-5147

CVE.ORG link : CVE-2009-5147


JSON object : View

Products Affected

ruby-lang

  • ruby
CWE
CWE-20

Improper Input Validation