[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYjcqFSzogFEmHkZ8wEG6T28dHuxePIlMdDxKifXVrqA":3,"g5a-risk:CVE-2009-4492":168},{"success":4,"data":5,"meta":166},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":47,"references":48,"referencesCount":109,"weaknesses":110,"weaknessesCount":114,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":115,"seoMetadata":116,"configurations":141,"relatedVendorCves":164,"notableEvents":165},"CVE-2009-4492","What is CVE-2009-4492?","WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.","WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 through patchlevel 248, 1.8.8dev, 1.9.1 through patchlevel 376, and 1.9.2dev writes data to a log f...","2010-01-13T20:30:00.53","2026-06-16T23:13:46.207",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.1623,[34,34,34,34,34,34,34],"High",[38,43],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"ruby-lang","webrick","1.3.1","cpe:2.3:a:ruby-lang:webrick:1.3.1:*:*:*:*:ruby:*:*",{"vendor":39,"product":44,"version":45,"criteria":46,"vulnerable":32},"ruby","*","cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",2,[49,55,63,67,70,75,79,82,86,91,93,95,97,99,101,103,105,107],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F37949","Secunia",[53,54],"Not Applicable","Vendor Advisory",{"url":56,"source":57,"tags":58},"http:\u002F\u002Fsecuritytracker.com\u002Fid?1023429","Securitytracker",[59,60,61,62],"Broken Link","Exploit","Third Party Advisory","VDB Entry",{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.redhat.com\u002Fsupport\u002Ferrata\u002FRHSA-2011-0908.html","Red Hat",[61],{"url":68,"source":65,"tags":69},"http:\u002F\u002Fwww.redhat.com\u002Fsupport\u002Ferrata\u002FRHSA-2011-0909.html",[61],{"url":71,"source":72,"tags":73},"http:\u002F\u002Fwww.ruby-lang.org\u002Fen\u002Fnews\u002F2010\u002F01\u002F10\u002Fwebrick-escape-sequence-injection","Ruby-lang",[74,54],"Patch",{"url":76,"source":77,"tags":78},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F508830\u002F100\u002F0\u002Fthreaded","Securityfocus",[59,61,62],{"url":80,"source":77,"tags":81},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F37710",[59,60,61,62],{"url":83,"source":84,"tags":85},"http:\u002F\u002Fwww.ush.it\u002Fteam\u002Fush\u002Fhack_httpd_escape\u002Fadv.txt","Ush",[59,60],{"url":87,"source":88,"tags":89},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2010\u002F0089","Vupen",[90],"Permissions Required",{"url":50,"source":51,"tags":92},[53,54],{"url":56,"source":57,"tags":94},[59,60,61,62],{"url":64,"source":65,"tags":96},[61],{"url":68,"source":65,"tags":98},[61],{"url":71,"source":72,"tags":100},[74,54],{"url":76,"source":77,"tags":102},[59,61,62],{"url":80,"source":77,"tags":104},[59,60,61,62],{"url":83,"source":84,"tags":106},[59,60],{"url":87,"source":88,"tags":108},[90],18,[111],{"id":112,"name":112,"description":113},"Unknown","NVD-CWE-noinfo",1,[],{"title":117,"metaDescription":118,"keywords":119,"canonicalUrl":120,"structuredData":121},"What is CVE-2009-4492? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-4492, a high severity cyber security vulnerability from 2010. WEBrick 1.3.1 in Ruby 1.8.6 through patchlevel 383, 1.8.7 th...","CVE-2009-4492, CVE-2009-4492 vulnerability, CVE-2009-4492 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2010, CVSS score, exploit, patch, remediation, ruby-lang security, webrick vulnerability, ruby vulnerability","\u002Fwhat-is\u002Fcve-2009-4492",{"@context":122,"@type":123,"headline":117,"description":118,"datePublished":10,"dateModified":11,"author":124,"publisher":128,"about":132,"mainEntityOfPage":136,"articleSection":139,"keywords":140},"https:\u002F\u002Fschema.org","TechArticle",{"@type":125,"name":126,"url":127},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":125,"name":126,"url":127,"logo":129},{"@type":130,"url":131},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":133,"name":6,"description":134,"additionalType":135},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":137,"@id":138},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-4492","Cybersecurity","CVE-2009-4492, CVE-2009-4492 vulnerability, CVE-2009-4492 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[142],{"Operator":143,"Negate":28,"Nodes":144},"AND",[145,150],{"Operator":146,"Negate":32,"CPEMatch":147},"OR",[148],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":149,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"A3987438-FB66-4B8A-A2E2-124139BC9216",{"Operator":146,"Negate":32,"CPEMatch":151},[152,156,160],{"Vulnerable":32,"Criteria":46,"MatchCriteriaID":153,"VersionStartExcluding":28,"VersionStartIncluding":154,"VersionEndExcluding":28,"VersionEndIncluding":155},"9D02C3E0-04FE-4200-944F-2EF327B8CC37","1.8.6","1.8.6.383",{"Vulnerable":32,"Criteria":46,"MatchCriteriaID":157,"VersionStartExcluding":28,"VersionStartIncluding":158,"VersionEndExcluding":28,"VersionEndIncluding":159},"0F4C4DE1-EDEF-49F4-81FE-6B9D25453300","1.8.7","1.8.7.248",{"Vulnerable":32,"Criteria":46,"MatchCriteriaID":161,"VersionStartExcluding":28,"VersionStartIncluding":162,"VersionEndExcluding":28,"VersionEndIncluding":163},"20792FA1-E46A-4BC1-81FD-E3C4660F2CC6","1.9.1","1.9.1.376",[],[],{"lastModified":11,"cacheTime":167,"version":22},1792257861402,{"score":169,"band":170,"action":171,"scoredAt":172},48,"Medium","Plan remediation","2026-10-17T06:37:01.938371+00:00"]