Main
Vulnerability Database
Exploits
ID:1299 - Exploit for Improper input validation in RubyGems - CVE-2017-0901
ID:1299 - Exploit for Improper input validation in RubyGems - CVE-2017-0901
Published: March 18, 2020
Vulnerability identifier: #VU8057
Vulnerability risk: Medium
CVE-ID: CVE-2017-0901
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
RubyGems
RubyGems
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to overwrite arbitrary files on the target system.
The weakness exists due to insufficient validation of user-supplied input. A remote attacker can trick the victim into installing a specially crafted RubyGem and overwrite arbitrary files.
The weakness exists due to insufficient validation of user-supplied input. A remote attacker can trick the victim into installing a specially crafted RubyGem and overwrite arbitrary files.
Remediation
Update to version 2.6.13.