Oval Definition:oval:com.ubuntu.trusty:def:20126496000
Revision Date:2013-01-03Version:1
Title:CVE-2012-6496 on Ubuntu 14.04 LTS (trusty) - medium.
Description:SQL injection vulnerability in the Active Record component in Ruby on Rails before 3.0.18, 3.1.x before 3.1.9, and 3.2.x before 3.2.10 allows remote attackers to execute arbitrary SQL commands via a crafted request that leverages incorrect behavior of dynamic finders in applications that can use unexpected data types in certain find_by_ method calls.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2012-6496
Platform(s):Ubuntu 14.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 14.04 LTS (trusty) is installed.
  • AND Package Information
  • NOT While related to the CVE in some way, the 'rails' package in trusty is not affected (note: 'contains no code').
  • OR NOT While related to the CVE in some way, the 'ruby-activerecord-3.2' package in trusty is not affected (note: '3.2.16-1').
    • BACK