PT-2012-3831 · Ruby+1 · Mail+1

Vincent Danen · Published 2012-07-05 · Updated 2017-10-24 · CVE-2012-2139

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mail gem versions prior to 2.4.4

Description The issue allows remote attackers to read arbitrary files via a .. (dot dot) in the to parameter. This is due to a directory traversal vulnerability in the lib/mail/network/delivery methods/file delivery.rb file.

Recommendations For Mail gem versions prior to 2.4.4, update to version 2.4.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the file delivery.rb module to minimize the risk of exploitation. Avoid using the to parameter with untrusted input in the affected API endpoint until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2012-2139

GHSA-CJ92-C4FJ-W9C5

SUSE-SU-2012_0843-1

Affected Products

Mail

Suse

References · 25

• 🔥 https://github.com/mikel/mail/commit/29aca25218e4c82991400eb9b0c933626aefc98f · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2140 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-2139 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080645.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080747.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-2139 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2139 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080648.html · Vendor Advisory
• http://secunia.com/advisories/48970 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-2139 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2012-2139 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cj92-c4fj-w9c5 · Vendor Advisory
• https://github.com/mikel/mail/commit/39b590ddb08f90ddbe445837359a2c8843e533d0 · Note
• https://github.com/mikel/mail/commit/ac56f03bdfc30b379aeecd4ff317d08fdaa328c2 · Note
• https://github.com/mikel/mail · Note