Description
Ruby Version Manager (RVM) before 1.2.1 writes file contents to a terminal without sanitizing non-printable characters, which might allow remote attackers to execute arbitrary commands via a crafted file, related to an "escape sequence injection vulnerability." NOTE: some of these details are obtained from third party information.
References
- JVNDB-2011-000005 third-party-advisory
- 45841 vdb-entry
- 42952 third-party-advisory
- JVN#30414126 third-party-advisory
- ruby-manager-escape-command-execution(64746) vdb-entry
- 70521 vdb-entry
- ADV-2011-0174 vdb-entry