CVE-2013-2512.yml

---
gem: ftpd
cve: 2013-2512
osvdb: 90784
ghsa: 7vxr-6cxg-j3x8
url: https://nvd.nist.gov/vuln/detail/CVE-2013-2512
title: ftpd Gem for Ruby Shell Character Handling Remote Command Injection
date: 2013-02-28
description: |
  ftpd Gem for Ruby contains a flaw that is triggered when handling a
  specially crafted option or filename that contains a shell
  character. This may allow a remote attacker to inject arbitrary
  commands.
cvss_v2: 9.0
cvss_v3: 9.8
patched_versions:
  - ">= 0.2.2"