PT-2008-6899 · Ruby+1 · Libruby1.9-Dbg+4

Jan Lieskovsky · Published 1970-01-01 · Updated 2018-10-03 · CVE-2008-3905

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions libruby1.9 versions 1.9 and earlier libruby1.9-dbg versions 1.9 and earlier ri1.9 versions 1.9 and earlier Ruby versions 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier

Description The issue affects the availability of protected information and can be exploited remotely. The vulnerability in Ruby's resolv.rb module allows remote attackers to spoof DNS responses due to the use of sequential transaction IDs and constant source ports for DNS requests.

Recommendations For libruby1.9 versions 1.9 and earlier, consider updating to a newer version to mitigate the risk. For libruby1.9-dbg versions 1.9 and earlier, consider updating to a newer version to mitigate the risk. For ri1.9 versions 1.9 and earlier, consider updating to a newer version to mitigate the risk. For Ruby versions 1.8.5 and earlier, 1.8.6 before 1.8.6-p287, 1.8.7 before 1.8.7-p72, and 1.9 r18423 and earlier, update to Ruby 1.8.6-p287, 1.8.7-p72, or a later version to resolve the issue.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

CWE-399

Related Identifiers

BDU:2015-01941

BDU:2015-01942

BDU:2015-01943

CVE-2008-3905

DSA-1651-1

DSA-1652-1

RHSA-2008:0896

RHSA-2008:0897

RHSA-2008_0897

RHSA-2026:7305

RHSA-2026:7307

RHSA-2026:8838

Affected Products

Red Hat

Ruby

Libruby1.9

Libruby1.9-Dbg

Ri1.9

References · 34

• 🔥 http://openwall.com/lists/oss-security/2008/09/03/3 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3790 · Security Note
• https://bdu.fstec.ru/vul/2015-01941 · Security Note
• http://debian.org/security/2008/dsa-1651 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200812-17.xml · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-October/msg00299.html · Vendor Advisory
• https://usn.ubuntu.com/651-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-01942 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3655 · Security Note
• http://debian.org/security/2008/dsa-1652 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0897.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3657 · Security Note
• http://ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby · Patch
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3905 · Security Note
• https://redhat.com/archives/fedora-package-announce/2008-October/msg00259.html · Vendor Advisory