PT-2017-7544 · Ruby+3 · Ruby+3

Jeremy · Published 2017-06-12 · Updated 2020-06-09 · CVE-2015-9096

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ruby versions prior to 2.4.0

Description The issue allows attackers to inject SMTP commands using CRLF sequences in RCPT TO or MAIL FROM commands. This can be demonstrated by CRLF sequences immediately before and after a DATA substring.

Recommendations For versions prior to 2.4.0, update to version 2.4.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of CRLF sequences in RCPT TO or MAIL FROM commands to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-93

Related Identifiers

ALT-PU-2017-2195

CVE-2015-9096

DLA-1421-1

DSA-3966-1

MGASA-2017-0290

RHSA-2026:7305

RHSA-2026:7307

RHSA-2026:8838

SUSE-SU-2020:1570-1

SUSE-SU-2020_1570-1

USN-3365-1

Affected Products

Alt Linux

Ruby

Suse

Ubuntu

References · 109

• 🔥 https://github.com/rails-lts/json_cve_2020_10663 · Exploit
• 🔥 http://mbsd.jp/Whitepaper/smtpi.pdf · Exploit
• https://github.com/ruby/ruby/commit/0827a7e52ba3d957a634b063bf5a391239b9ffee · Patch
• https://ubuntu.com/security/CVE-2015-7551 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1570-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-2337 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-1855 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-9096 · Security Note
• https://ubuntu.com/security/CVE-2016-2339 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2017-0290 · Vendor Advisory
• https://debian.org/security/2017/dsa-3966 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1421-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-9096 · Security Note
• https://osv.dev/vulnerability/DSA-3966-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-9096 · Vendor Advisory