PT-2017-2997 · Ruby+5 · Webrick+6

Yusuke Endoh · Published 2017-07-01 · Updated 2022-05-14 · CVE-2017-10784

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ruby versions prior to 2.2.8 Ruby versions 2.3.x prior to 2.3.5 Ruby versions 2.4.x through 2.4.1

Description The issue is related to the Basic authentication code in the WEBrick library in Ruby, which allows remote attackers to inject terminal emulator escape sequences into its log and possibly execute arbitrary commands via a crafted user name. This is due to improper handling of log output. An attacker could exploit this issue by using a specially prepared username, potentially allowing them to execute arbitrary commands in the user's terminal emulator.

Recommendations For Ruby versions prior to 2.2.8, update to version 2.2.8 or later. For Ruby versions 2.3.x prior to 2.3.5, update to version 2.3.5 or later. For Ruby versions 2.4.x through 2.4.1, update to a version later than 2.4.1.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-117

CWE-287

Related Identifiers

ALT-PU-2017-2216

BDU:2017-02342

CESA-2018_0378

CVE-2017-10784

DLA-1113-1

DLA-1114-1

DLA-1421-1

DSA-4031-1

GHSA-369M-2GV6-MW28

MGASA-2017-0371

RHSA-2017:3485

RHSA-2018:0378

RHSA-2018:0583

RHSA-2018:0585

RHSA-2018_0378

RHSA-2026:7305

RHSA-2026:7307

RHSA-2026:8838

SUSE-SU-2020:1570-1

SUSE-SU-2020_1570-1

USN-3439-1

USN-3528-1

USN-3685-1

Affected Products

Alt Linux

Centos

Red Hat

Ruby

Suse

Ubuntu

Webrick

References · 148

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/webrick/CVE-2017-10784.yml · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/openssl/CVE-2017-14033.yml · Exploit
• 🔥 https://github.com/rails-lts/json_cve_2020_10663 · Exploit
• https://osv.dev/vulnerability/USN-3528-1 · Vendor Advisory
• https://ruby-lang.org/en/news/2017/09/14/ruby-2-3-5-released · Vendor Advisory
• https://usn.ubuntu.com/3528-1 · Vendor Advisory
• https://ruby-lang.org/en/news/2017/09/14/webrick-basic-auth-escape-sequence-injection-cve-2017-10784 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2017-0371.html · Security Note
• https://ubuntu.com/security/CVE-2018-1000074 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2018-0378.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0371 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2017:3485 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:0378 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-14064 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2017-10784 · Vendor Advisory