The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp containing "openuri-" followed by a crafted UID, and putting Ruby code in said directory once a meta file is created.
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
| Link | Tags |
|---|---|
| https://github.com/tigris/open-uri-cached/blob/master/lib/open-uri/cached.rb#L39 | third party advisory |
| https://github.com/tigris/open-uri-cached/blob/master/lib/open-uri/cached.rb#L115 | third party advisory |
| https://github.com/tigris/open-uri-cached/blob/master/lib/open-uri/cached.rb#L25 | third party advisory |
| http://www.openwall.com/lists/oss-security/2015/05/06/2 | third party advisory mailing list |
| http://www.securityfocus.com/bid/74469 | vdb entry third party advisory |
| http://www.benjaminfleischer.com/2013/03/20/yaml-and-security-in-ruby/ | third party advisory |