Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2008-3657

The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not check "taintness" of inputs, which allows context-dependent attackers to bypass safe levels and execute dangerous functions by accessing a library using DL.dlopen.

  • Published: Aug 13, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-3657
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
ruby-lang / ruby 1.8.3-preview1 1.8.3-preview1.x
ruby-lang / ruby 1.8.2-preview4 1.8.2-preview4.x
ruby-lang / ruby 1.8.4-preview2 1.8.4-preview2.x
ruby-lang / ruby 1.8.1--9 1.8.1--9.x
ruby-lang / ruby 1.8.7-preview3 1.8.7-preview3.x
ruby-lang / ruby 1.8.7-p17 1.8.7-p17.x
ruby-lang / ruby 1.9.0 1.9.0.x
ruby-lang / ruby 1.8.2-preview3 1.8.2-preview3.x
ruby-lang / ruby 1.8.6-p110 1.8.6-p110.x
ruby-lang / ruby 1.8.5-p2 1.8.5-p2.x
ruby-lang / ruby 1.8.5-preview5 1.8.5-preview5.x
ruby-lang / ruby 1.8.5-p12 1.8.5-p12.x
ruby-lang / ruby 1.8.5-preview1 1.8.5-preview1.x
ruby-lang / ruby 1.8.7-p71 1.8.7-p71.x
ruby-lang / ruby 1.8.4-preview1 1.8.4-preview1.x
ruby-lang / ruby 1.8.7-p22 1.8.7-p22.x
ruby-lang / ruby 1.8.4 1.8.4.x
ruby-lang / ruby 1.8.3 1.8.3.x
ruby-lang / ruby - 1.8.5.x
ruby-lang / ruby 1.8.3-preview2 1.8.3-preview2.x
ruby-lang / ruby 1.8.2 1.8.2.x
ruby-lang / ruby 1.8.4-preview3 1.8.4-preview3.x
ruby-lang / ruby 1.8.7-preview2 1.8.7-preview2.x
ruby-lang / ruby 1.8.1 1.8.1.x
ruby-lang / ruby 1.8.2-preview2 1.8.2-preview2.x
ruby-lang / ruby 1.8.3-preview3 1.8.3-preview3.x
ruby-lang / ruby 1.8.6-preview1 1.8.6-preview1.x
ruby-lang / ruby 1.8.6-p114 1.8.6-p114.x
ruby-lang / ruby 1.8.5-preview4 1.8.5-preview4.x
ruby-lang / ruby 1.8.5-preview2 1.8.5-preview2.x
ruby-lang / ruby 1.8.6-preview3 1.8.6-preview3.x
ruby-lang / ruby 1.8.0 1.8.0.x
ruby-lang / ruby 1.8.5-p11 1.8.5-p11.x
ruby-lang / ruby 1.8.7 1.8.7.x
ruby-lang / ruby 1.6.8 1.6.8.x
ruby-lang / ruby 1.8.6-preview2 1.8.6-preview2.x
ruby-lang / ruby 1.8.5-p35 1.8.5-p35.x
ruby-lang / ruby 1.8.5-p113 1.8.5-p113.x
ruby-lang / ruby 1.8.5-p115 1.8.5-p115.x
ruby-lang / ruby 1.8.7-preview1 1.8.7-preview1.x
ruby-lang / ruby 1.8.6 1.8.6.x
ruby-lang / ruby 1.8.7-preview4 1.8.7-preview4.x
ruby-lang / ruby 1.8.5-preview3 1.8.5-preview3.x