| CVE-2011-1004 | Date: (C)2011-03-02 (M)2024-04-19 |
The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack.
CVSS Score and Metrics +CVSS Score and Metrics -| CVSS V2 Severity: |
| CVSS Score : 6.3 |
| Exploit Score: 3.4 |
| Impact Score: 9.2 |
| |
| CVSS V2 Metrics: |
| Access Vector: LOCAL |
| Access Complexity: MEDIUM |
| Authentication: NONE |
| Confidentiality: NONE |
| Integrity: COMPLETE |
| Availability: COMPLETE |
| | |
