Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2013-4479
Deferred
More InfoOfficial Page
Source-secalert@redhat.com
View Known Exploited Vulnerability (KEV) details
Published At-07 Dec, 2013 | 20:55
Updated At-11 Apr, 2025 | 00:51

lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the content_type of an email attachment.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.06.8MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
CPE Matches
supmua
supmua
>>sup>>Versions up to 0.13.2(inclusive)
cpe:2.3:a:supmua:sup:*:*:*:*:*:*:*:*
supmua
supmua
>>sup>>0.13.0
cpe:2.3:a:supmua:sup:0.13.0:*:*:*:*:*:*:*
supmua
supmua
>>sup>>0.13.1
cpe:2.3:a:supmua:sup:0.13.1:*:*:*:*:*:*:*
supmua
supmua
>>sup>>0.14.0
cpe:2.3:a:supmua:sup:0.14.0:*:*:*:*:*:*:*
supmua
supmua
>>sup>>0.14.1
cpe:2.3:a:supmua:sup:0.14.1:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-94Primarynvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165917.htmlsecalert@redhat.com
N/A
http://rubyforge.org/pipermail/sup-talk/2013-October/004996.htmlsecalert@redhat.com
N/A
http://seclists.org/fulldisclosure/2013/Oct/272secalert@redhat.com
N/A
http://secunia.com/advisories/55294secalert@redhat.com
Vendor Advisory
http://secunia.com/advisories/55400secalert@redhat.com
Vendor Advisory
http://www.debian.org/security/2012/dsa-2805secalert@redhat.com
N/A
http://www.openwall.com/lists/oss-security/2013/10/30/2secalert@redhat.com
N/A
https://github.com/sup-heliotrope/sup/commit/ca0302e0c716682d2de22e9136400c704cc93e42secalert@redhat.com
Exploit
Patch
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165917.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://rubyforge.org/pipermail/sup-talk/2013-October/004996.htmlaf854a3a-2127-422b-91ae-364da2661108
N/A
http://seclists.org/fulldisclosure/2013/Oct/272af854a3a-2127-422b-91ae-364da2661108
N/A
http://secunia.com/advisories/55294af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/55400af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.debian.org/security/2012/dsa-2805af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.openwall.com/lists/oss-security/2013/10/30/2af854a3a-2127-422b-91ae-364da2661108
N/A
https://github.com/sup-heliotrope/sup/commit/ca0302e0c716682d2de22e9136400c704cc93e42af854a3a-2127-422b-91ae-364da2661108
Exploit
Patch
Change History
0Changes found
Details not found