cve/2013/CVE-2013-0334.md

CVE-2013-0334

Description

Bundler before 1.7, when multiple top-level source lines are used, allows remote attackers to install arbitrary gems by creating a gem with the same name as another gem in a different source.

POC

Reference

• http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Github

• https://github.com/ikedaisuke/rushcheck