CVE-2013-2512

The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-01-26

Last modified

2024-08-06

Weaknesses

CWE-78

Affected products

• Ftpd (Ftpd Project)

References

• http://vapidlabs.com/advisory.php?v=34