PT-2011-4299 · Ruby+1 · Ruby On Rails+1

Vincent Danen · Published 2011-08-29 · Updated 2019-08-08 · CVE-2011-3187

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Ruby on Rails version 3.0.5

Description The issue concerns the to s method in actionpack/lib/action dispatch/middleware/remote ip.rb, which fails to validate the X-Forwarded-For header in requests from IP addresses on a Class C network. This could allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted header.

Recommendations For Ruby on Rails version 3.0.5, consider validating the X-Forwarded-For header to prevent arbitrary text injection into log files or address parsing bypass. As a temporary workaround, restrict access to the to s method in actionpack/lib/action dispatch/middleware/remote ip.rb to minimize the risk of exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-3187

GHSA-3VFW-7RCP-3XGM

Affected Products

Debian

Ruby On Rails

References · 18

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2011-3187.yml · Exploit
• 🔥 https://exploit-db.com/exploits/35352 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2011/08/22/14 · Exploit
• 🔥 http://webservsec.blogspot.com/2011/02/ruby-on-rails-vulnerability.html · Exploit
• 🔥 https://bugzilla.novell.com/show_bug.cgi?id=673010 · Exploit
• https://security-tracker.debian.org/tracker/CVE-2011-3187 · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/08/22/13 · Patch
• http://openwall.com/lists/oss-security/2011/08/20/1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-3187 · Security Note
• http://openwall.com/lists/oss-security/2011/08/17/1 · Patch
• https://osv.dev/vulnerability/GHSA-3vfw-7rcp-3xgm · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-3187 · Vendor Advisory
• http://openwall.com/lists/oss-security/2011/08/19/11 · Patch
• http://openwall.com/lists/oss-security/2011/08/22/5 · Patch
• https://osv.dev/vulnerability/CVE-2011-3187 · Vendor Advisory