CVE-2015-9097 - Vulnerability Details - OpenCVE

The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Mail Project	Mail

Configuration 1 [-]

cpe:2.3:a:mail_project:mail:*:*:*:*:*:ruby:*:*

No data.

References

Link	Providers
http://openwall.com/lists/oss-security/2015/12/11/3
http://www.mbsd.jp/Whitepaper/smtpi.pdf
https://github.com/mikel/mail/commit/72befdc4dab3e6e288ce226a7da2aa474cf5be83
https://github.com/mikel/mail/pull/1097
https://github.com/rubysec/ruby-advisory-db/issues/215
https://hackerone.com/reports/137631
https://nvd.nist.gov/vuln/detail/CVE-2015-9097
https://rubysec.com/advisories/mail-OSVDB-131677
https://www.cve.org/CVERecord?id=CVE-2015-9097

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2017-06-12T20:00:00Z

Updated: 2024-09-17T03:28:30.346Z

Reserved: 2017-06-12T00:00:00Z

Link: CVE-2015-9097

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2017-06-12T20:29:00.237

Modified: 2025-04-20T01:37:25.860

Link: CVE-2015-9097

Redhat

Severity : Low

Publid Date: 2015-12-11T00:00:00Z

Links: CVE-2015-9097 - Bugzilla

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-06-12T20:00:00Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/mikel/mail/pull/1097"}, {"tags": ["x_refsource_MISC"], "url": "https://hackerone.com/reports/137631"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/mikel/mail/commit/72befdc4dab3e6e288ce226a7da2aa474cf5be83"}, {"tags": ["x_refsource_MISC"], "url": "http://openwall.com/lists/oss-security/2015/12/11/3"}, {"tags": ["x_refsource_MISC"], "url": "https://rubysec.com/advisories/mail-OSVDB-131677"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/rubysec/ruby-advisory-db/issues/215"}, {"tags": ["x_refsource_MISC"], "url": "http://www.mbsd.jp/Whitepaper/smtpi.pdf"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2015-9097", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/mikel/mail/pull/1097", "refsource": "MISC", "url": "https://github.com/mikel/mail/pull/1097"}, {"name": "https://hackerone.com/reports/137631", "refsource": "MISC", "url": "https://hackerone.com/reports/137631"}, {"name": "https://github.com/mikel/mail/commit/72befdc4dab3e6e288ce226a7da2aa474cf5be83", "refsource": "MISC", "url": "https://github.com/mikel/mail/commit/72befdc4dab3e6e288ce226a7da2aa474cf5be83"}, {"name": "http://openwall.com/lists/oss-security/2015/12/11/3", "refsource": "MISC", "url": "http://openwall.com/lists/oss-security/2015/12/11/3"}, {"name": "https://rubysec.com/advisories/mail-OSVDB-131677", "refsource": "MISC", "url": "https://rubysec.com/advisories/mail-OSVDB-131677"}, {"name": "https://github.com/rubysec/ruby-advisory-db/issues/215", "refsource": "MISC", "url": "https://github.com/rubysec/ruby-advisory-db/issues/215"}, {"name": "http://www.mbsd.jp/Whitepaper/smtpi.pdf", "refsource": "MISC", "url": "http://www.mbsd.jp/Whitepaper/smtpi.pdf"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T08:36:31.534Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/mikel/mail/pull/1097"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://hackerone.com/reports/137631"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/mikel/mail/commit/72befdc4dab3e6e288ce226a7da2aa474cf5be83"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://openwall.com/lists/oss-security/2015/12/11/3"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://rubysec.com/advisories/mail-OSVDB-131677"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/rubysec/ruby-advisory-db/issues/215"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.mbsd.jp/Whitepaper/smtpi.pdf"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2015-9097", "datePublished": "2017-06-12T20:00:00Z", "dateReserved": "2017-06-12T00:00:00Z", "dateUpdated": "2024-09-17T03:28:30.346Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mail_project:mail:*:*:*:*:*:ruby:*:*", "matchCriteriaId": "99D6663F-F6E8-4892-8DD4-AAEECBEF6329", "versionEndIncluding": "2.5.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring."}, {"lang": "es", "value": "La mail gem versiones anteriores a 2.5.5 para Ruby (tambi\u00e9n conocida como A Really Ruby Mail Library) es vulnerable a inyecci\u00f3n de comandos SMTP mediante secuencias CRLF con el comando RCPT TO o MAIL FROM, como lo demuestran las secuencias CRLF inmediatamente antes y despu\u00e9s de una subcadena DATA."}], "id": "CVE-2015-9097", "lastModified": "2025-04-20T01:37:25.860", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-06-12T20:29:00.237", "references": [{"source": "cve@mitre.org", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://openwall.com/lists/oss-security/2015/12/11/3"}, {"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "http://www.mbsd.jp/Whitepaper/smtpi.pdf"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/mikel/mail/commit/72befdc4dab3e6e288ce226a7da2aa474cf5be83"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://github.com/mikel/mail/pull/1097"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://github.com/rubysec/ruby-advisory-db/issues/215"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://hackerone.com/reports/137631"}, {"source": "cve@mitre.org", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://rubysec.com/advisories/mail-OSVDB-131677"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://openwall.com/lists/oss-security/2015/12/11/3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory"], "url": "http://www.mbsd.jp/Whitepaper/smtpi.pdf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/mikel/mail/commit/72befdc4dab3e6e288ce226a7da2aa474cf5be83"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://github.com/mikel/mail/pull/1097"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://github.com/rubysec/ruby-advisory-db/issues/215"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Third Party Advisory"], "url": "https://hackerone.com/reports/137631"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://rubysec.com/advisories/mail-OSVDB-131677"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-93"}], "source": "nvd@nist.gov", "type": "Primary"}]}