PT-2010-1350 · Ruby+1 · Ruby+1

Alessandro Tanasi + 5 · Published 2010-01-13 · Updated 2023-08-01 · CVE-2009-4492

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ruby versions 1.8.6 through patchlevel 383 Ruby versions 1.8.7 through patchlevel 248 Ruby version 1.8.8dev Ruby versions 1.9.1 through patchlevel 376 Ruby version 1.9.2dev

Description The issue allows remote attackers to potentially modify a window's title or execute arbitrary commands via an HTTP request containing an escape sequence for a terminal emulator, as WEBrick writes data to a log file without sanitizing non-printable characters.

Recommendations For Ruby versions 1.8.6 through patchlevel 383, update to a version with the necessary security patches. For Ruby versions 1.8.7 through patchlevel 248, update to a version with the necessary security patches. For Ruby version 1.8.8dev, apply the available security fix. For Ruby versions 1.9.1 through patchlevel 376, update to a version with the necessary security patches. For Ruby version 1.9.2dev, apply the available security fix.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2009-4492

GHSA-6MQ2-37J5-W6R6

RHSA-2011:0908

RHSA-2011:0909

RHSA-2011_0908

RHSA-2011_0909

Affected Products

Red Hat

Ruby

References · 29

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/webrick/CVE-2009-4492.yml · Exploit
• 🔥 http://securityfocus.com/bid/37710 · Exploit
• 🔥 http://securitytracker.com/id?1023429 · Exploit
• 🔥 https://exploit-db.com/exploits/33489 · Exploit
• 🔥 http://ush.it/team/ush/hack_httpd_escape/adv.txt · Exploit
• http://redhat.com/support/errata/RHSA-2011-0909.html · Vendor Advisory
• http://ruby-lang.org/en/news/2010/01/10/webrick-escape-sequence-injection · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4492 · Security Note
• http://redhat.com/support/errata/RHSA-2011-0908.html · Vendor Advisory
• http://secunia.com/advisories/37949 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-6mq2-37j5-w6r6 · Vendor Advisory
• https://github.com/ruby/webrick · Note
• http://vupen.com/english/advisories/2010/0089 · Note
• https://access.redhat.com/errata/RHSA-2011:0908 · Note
• https://web.archive.org/web/20100113155532/http://vupen.com/english/advisories/2010/0089 · Note