PT-2011-2809 · Ruby+1 · Ruby+1

Urabe Shyouhei · Published 2011-03-02 · Updated 2013-08-13 · CVE-2011-1005

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Ruby versions 1.8.6 through 1.8.6-420 Ruby versions 1.8.7 through 1.8.7-330 Ruby version 1.8.8dev

Description The safe-level feature in Ruby allows context-dependent attackers to modify strings via the Exception#to s method. This could be used to change an intended pathname.

Recommendations For Ruby versions 1.8.6 through 1.8.6-420, consider updating to a version outside of this range to mitigate the risk. For Ruby versions 1.8.7 through 1.8.7-330, consider updating to a version outside of this range to mitigate the risk. For Ruby version 1.8.8dev, consider avoiding the use of the Exception#to s method until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-1005

RHSA-2011:0908

RHSA-2011:0909

RHSA-2011:0910

RHSA-2011_0908

RHSA-2011_0909

RHSA-2011_0910

Affected Products

Red Hat

Ruby

References · 32

• 🔥 http://ruby-lang.org/en/news/2011/02/18/exception-methods-can-bypass-safe · Exploit
• http://redhat.com/support/errata/RHSA-2011-0908.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/02/21/2 · Patch
• http://redhat.com/support/errata/RHSA-2011-0910.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2011-0909.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2012/May/msg00001.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054422.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:097 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2011:098 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2011-0910.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/02/21/5 · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=678920 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-1005 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/054436.html · Vendor Advisory
• http://osvdb.org/70957 · Note