The deliver function in the sendmail delivery agent (lib/mail/network/delivery_methods/sendmail.rb) in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-20,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| mikel_lindsaar | 2.2.4 | |
| mikel_lindsaar | 2.2.5.1 | |
| mikel_lindsaar | 2.2.6 | |
| mikel_lindsaar | 1.3.0 | |
| mikel_lindsaar | 2.2.7 | |
| mikel_lindsaar | 1.5.4 | |
| mikel_lindsaar | 2.2.3 | |
| mikel_lindsaar | 2.2.1 | |
| mikel_lindsaar | 1.3.1 | |
| mikel_lindsaar | 1.4.1 | |
| mikel_lindsaar | 2.1.5 | |
| mikel_lindsaar | 2.1.5.1 | |
| mikel_lindsaar | 2.0.3 | |
| mikel_lindsaar | 2.1.3 | |
| mikel_lindsaar | 1.3.4 | |
| mikel_lindsaar | 2.2.13 | |
| mikel_lindsaar | 1.2.7 | |
| mikel_lindsaar | 2.2.2 | |
| mikel_lindsaar | 2.2.10 | |
| mikel_lindsaar | 1.2.8 | |
| mikel_lindsaar | 2.1.2 | |
| mikel_lindsaar | 1.2.5 | |
| mikel_lindsaar | 2.1.5.3 | |
| mikel_lindsaar | 2.1.5.2 | |
| mikel_lindsaar | 1.3.2 | |
| mikel_lindsaar | 1.5.0 | |
| mikel_lindsaar | 1.2.6 | |
| mikel_lindsaar | 2.2.9 | |
| mikel_lindsaar | 2.2.0 | |
| mikel_lindsaar | 1.2.1 | |
| mikel_lindsaar | 1.5.2 | |
| mikel_lindsaar | 1.5.1 | |
| mikel_lindsaar | 1.1.0 | |
| mikel_lindsaar | 2.0.5 | |
| mikel_lindsaar | 2.2.9.1 | |
| mikel_lindsaar | 1.0.0 | |
| mikel_lindsaar | 1.5.3 | |
| mikel_lindsaar | 2.1.0 | |
| mikel_lindsaar | 1.6.0 | |
| mikel_lindsaar | * | |
| mikel_lindsaar | 1.2.9 | |
| mikel_lindsaar | 2.1.1 | |
| mikel_lindsaar | 2.2.5.2 | |
| mikel_lindsaar | 2.2.5 | |
| mikel_lindsaar | 2.2.6.1 | |
| mikel_lindsaar | 2.2.11 | |
| mikel_lindsaar | 2.2.12 | |
| mikel_lindsaar | 1.3.3 | |
| mikel_lindsaar | 1.4.2 | |
| mikel_lindsaar | 1.3.5 | |
| mikel_lindsaar | 1.4.3 | |
| mikel_lindsaar | 1.4.0 |