Unscored severity · published Dec 7, 2013
CVE-2013-4479
lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the content_type of…
–
CVSS
3.2%
EPSS
No
On KEV
Description
lib/sup/message_chunks.rb in Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the content_type of an email attachment.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SU
Sup · Supmua
through 0.13.2; 0.13.0; 0.13.1; 0.14.0; 0.14.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4479
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4479
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2015-September/165917.html
rubyforge.org
http://rubyforge.org/pipermail/sup-talk/2013-October/004996.html
seclists.org
http://seclists.org/fulldisclosure/2013/Oct/272
Vendor Advisory
http://secunia.com/advisories/55294
Vendor Advisory
http://secunia.com/advisories/55400
www.debian.org
http://www.debian.org/security/2012/dsa-2805
More from Sup
–
CVE-2013-4478
Sup before 0.13.2.1 and 0.14.x before 0.14.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of an email attachment