PT-2018-4238 · Ruby · Vladtheenterprising

Larry W. Cashdollar + 1 · Published 2018-01-10 · Updated 2022-05-14 · CVE-2014-4996

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions VladTheEnterprising gem version 0.2

Description The issue allows local users to write to arbitrary files via a symlink attack on /tmp/my.cnf.#{target host}. This is possible due to a vulnerability in the lib/vlad/dba/mysql.rb file of the VladTheEnterprising gem.

Recommendations For version 0.2 of the VladTheEnterprising gem, consider restricting access to the lib/vlad/dba/mysql.rb file to minimize the risk of exploitation. As a temporary workaround, avoid using the /tmp/my.cnf.#{target host} file in the affected lib/vlad/dba/mysql.rb until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

CVE-2014-4996

GHSA-X4VJ-279X-QWF2

Affected Products

Vladtheenterprising

References · 8

• https://osv.dev/vulnerability/GHSA-x4vj-279x-qwf2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-4996 · Security Note
• http://securityfocus.com/bid/68731 · Note
• https://web.archive.org/web/20200229054941/http://securityfocus.com/bid/68731 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94744 · Note
• http://openwall.com/lists/oss-security/2014/07/07/14 · Note
• http://vapid.dhs.org/advisories/VladTheEnterprising-0.2.html · Note
• http://openwall.com/lists/oss-security/2014/07/17/5 · Note