vulnerability

Huawei EulerOS: CVE-2015-9096: ruby security update

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Jun 12, 2017
Added
Sep 24, 2019
Modified
Aug 13, 2025

Description

A SMTP command injection flaw was found in the way Ruby's Net::SMTP module handled CRLF sequences in certain SMTP commands. An attacker could potentially use this flaw to inject SMTP commands in a SMTP session in order to facilitate phishing attacks or spam campaigns.

Solutions

huawei-euleros-2_0_sp5-upgrade-rubyhuawei-euleros-2_0_sp5-upgrade-ruby-irbhuawei-euleros-2_0_sp5-upgrade-ruby-libs
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.