Every CVESearch/Get API key

CVE-2012-4466

Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068...

5.0 Medium

CVE-2012-4466 is a medium vulnerability (CVSS 5.0) in Ruby-lang Ruby, published April 25, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.62%, the 85th percentile. No source names a fixed version.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
2.62%EPSS, 85th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the name_err_mesg_to_str API function, which marks the string as tainted, a different vulnerability than CVE-2011-1005.

Exploit likelihood

2.62%Up 1.1 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
graphviz
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.26.0-10.el6
0:2.26.0-10.el6
graphviz-debuginfo
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.26.0-10.el6
0:2.26.0-10.el6
graphviz-devel
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.26.0-10.el6
0:2.26.0-10.el6
graphviz-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.26.0-10.el6
0:2.26.0-10.el6
graphviz-gd
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.26.0-10.el6
0:2.26.0-10.el6
graphviz-ruby
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.26.0-10.el6
0:2.26.0-10.el6
openshift-console
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:0.0.16-1.el6op
0:0.0.16-1.el6op
openshift-origin-broker
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.11-1.el6op
0:1.0.11-1.el6op
openshift-origin-broker-util
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.15-1.el6op
0:1.0.15-1.el6op
ruby193-ruby
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.9.3.327-25.el6
0:1.9.3.327-25.el6
Show 59 moreShow less
Affected packages
PackageAffectedFixed
ruby193-ruby-debuginfo
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.9.3.327-25.el6
0:1.9.3.327-25.el6
ruby193-ruby-devel
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.9.3.327-25.el6
0:1.9.3.327-25.el6
ruby193-ruby-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.9.3.327-25.el6
0:1.9.3.327-25.el6
ruby193-ruby-irb
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.9.3.327-25.el6
0:1.9.3.327-25.el6
ruby193-ruby-libs
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.9.3.327-25.el6
0:1.9.3.327-25.el6
ruby193-ruby-tcltk
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.9.3.327-25.el6
0:1.9.3.327-25.el6
ruby193-rubygem-actionpack
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 1:3.2.8-3.el6
1:3.2.8-3.el6
ruby193-rubygem-actionpack-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 1:3.2.8-3.el6
1:3.2.8-3.el6
ruby193-rubygem-activemodel
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:3.2.8-2.el6
0:3.2.8-2.el6
ruby193-rubygem-activemodel-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:3.2.8-2.el6
0:3.2.8-2.el6
ruby193-rubygem-activerecord
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 1:3.2.8-3.el6
1:3.2.8-3.el6
ruby193-rubygem-activerecord-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 1:3.2.8-3.el6
1:3.2.8-3.el6
ruby193-rubygem-bigdecimal
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.1.0-25.el6
0:1.1.0-25.el6
ruby193-rubygem-io-console
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:0.3-25.el6
0:0.3-25.el6
ruby193-rubygem-json
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.5.4-25.el6
0:1.5.4-25.el6
ruby193-rubygem-minitest
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.5.1-25.el6
0:2.5.1-25.el6
ruby193-rubygem-railties
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:3.2.8-2.el6
0:3.2.8-2.el6
ruby193-rubygem-railties-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:3.2.8-2.el6
0:3.2.8-2.el6
ruby193-rubygem-rake
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:0.9.2.2-25.el6
0:0.9.2.2-25.el6
ruby193-rubygem-rdoc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:3.9.4-25.el6
0:3.9.4-25.el6
ruby193-rubygem-ruby_parser
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.3.1-3.el6op
0:2.3.1-3.el6op
ruby193-rubygem-ruby_parser-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.3.1-3.el6op
0:2.3.1-3.el6op
ruby193-rubygems
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.8.23-25.el6
0:1.8.23-25.el6
ruby193-rubygems-devel
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.8.23-25.el6
0:1.8.23-25.el6
rubygem-actionpack
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 1:3.0.13-4.el6op
1:3.0.13-4.el6op
rubygem-activemodel
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:3.0.13-3.el6op
0:3.0.13-3.el6op
rubygem-activemodel-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:3.0.13-3.el6op
0:3.0.13-3.el6op
rubygem-activerecord
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 1:3.0.13-5.el6op
1:3.0.13-5.el6op
rubygem-bson
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.8.1-2.el6op
0:1.8.1-2.el6op
rubygem-mongo
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.8.1-2.el6op
0:1.8.1-2.el6op
rubygem-mongo-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.8.1-2.el6op
0:1.8.1-2.el6op
rubygem-openshift-origin-auth-remote-user
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.5-1.el6op
0:1.0.5-1.el6op
rubygem-openshift-origin-console
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.10-1.el6op
0:1.0.10-1.el6op
rubygem-openshift-origin-console-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.10-1.el6op
0:1.0.10-1.el6op
rubygem-openshift-origin-controller
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.12-1.el6op
0:1.0.12-1.el6op
rubygem-ruby_parser
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.0.4-6.el6op
0:2.0.4-6.el6op
rubygem-ruby_parser-doc
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:2.0.4-6.el6op
0:2.0.4-6.el6op
openshift-origin-cartridge-jbosseap-6.0
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.4-1.el6op
0:1.0.4-1.el6op
openshift-origin-cartridge-cron-1.4
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.3-1.el6op
0:1.0.3-1.el6op
openshift-origin-cartridge-diy-0.1
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.3-1.el6op
0:1.0.3-1.el6op
openshift-origin-cartridge-haproxy-1.4
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.4-1.el6op
0:1.0.4-1.el6op
openshift-origin-cartridge-jbossews-1.0
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.13-1.el6op
0:1.0.13-1.el6op
openshift-origin-cartridge-jenkins-1.4
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.2-1.el6op
0:1.0.2-1.el6op
openshift-origin-cartridge-jenkins-client-1.4
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.2-1.el6op
0:1.0.2-1.el6op
openshift-origin-cartridge-mysql-5.1
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.5-1.el6op
0:1.0.5-1.el6op
openshift-origin-cartridge-perl-5.10
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.3-1.el6op
0:1.0.3-1.el6op
openshift-origin-cartridge-php-5.3
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.5-1.el6op
0:1.0.5-1.el6op
openshift-origin-cartridge-postgresql-8.4
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.3-2.el6op
0:1.0.3-2.el6op
openshift-origin-cartridge-ruby-1.8
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.7-1.el6op
0:1.0.7-1.el6op
openshift-origin-cartridge-ruby-1.9-scl
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.8-1.el6op
0:1.0.8-1.el6op
openshift-origin-msg-node-mcollective
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.3-1.el6op
0:1.0.3-1.el6op
php
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:5.3.3-22.el6
0:5.3.3-22.el6
php-bcmath
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:5.3.3-22.el6
0:5.3.3-22.el6
php-debuginfo
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:5.3.3-22.el6
0:5.3.3-22.el6
php-devel
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:5.3.3-22.el6
0:5.3.3-22.el6
php-imap
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:5.3.3-22.el6
0:5.3.3-22.el6
php-mbstring
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:5.3.3-22.el6
0:5.3.3-22.el6
php-process
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:5.3.3-22.el6
0:5.3.3-22.el6
rubygem-openshift-origin-node
Red Hat:openshift:1::el6
From an advisory covering 15 CVEs
before 0:1.0.11-1.el6op
0:1.0.11-1.el6op

What each source reports

NVD Score used5.0

Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the name_err_mesg_to_str API function, which marks the string as tainted, a different vulnerability than CVE-2011-1005.

Record
CVE-2012-4466
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE ListNo score

Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the name_err_mesg_to_str API function, which marks the string as tainted, a different vulnerability than CVE-2011-1005.

Record
CVE-2012-4466
Updated
2026-11-02
EUVDEUVD-2012-4395No score

Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the name_err_mesg_to_str API function, which marks the string as tainted, a different vulnerability than CVE-2011-1005.

Record
EUVD-2012-4395
Updated
2026-11-03
GitHub AdvisoriesGHSA-gm9g-777x-3fp6No score

Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068...

Ruby 1.8.7 before patchlevel 371, 1.9.3 before patchlevel 286, and 2.0 before revision r37068 allows context-dependent attackers to bypass safe-level restrictions and modify untainted strings via the name_err_mesg_to_str API function, which marks the string as tainted, a different vulnerability than CVE-2011-1005.

Record
GHSA-gm9g-777x-3fp6
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 79 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open