UBUNTU-CVE-2013-0162

Dashboard / Vulnerabilities / UBUNTU-CVE-2013-0162

UBUNTU-CVE-2013-0162

Summary:

Details: The diff_pp function in lib/gauntlet_rubyparser.rb in the ruby_parser gem 3.1.1 and earlier for Ruby allows local users to overwrite arbitrary files via a symlink attack on a temporary file with a predictable name in /tmp.

References: https://ubuntu.com/security/CVE-2013-0162, http://www.openwall.com/lists/oss-security/2013/02/22/5, https://www.cve.org/CVERecord?id=CVE-2013-0162