PT-2018-4245 · Ruby · Ciborg

Larry W. Cashdollar + 1 · Published 2018-01-10 · Updated 2018-07-23 · CVE-2014-5003

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions ciborg gem version 3.0.0

Description The issue concerns a /tmp file race condition in the chef/travis-cookbooks/ci environment/perlbrew/recipes/default.rb file of the ciborg gem. This allows a malicious local user to create a symlink attack on /tmp/perlbrew-installer, potentially overwriting the file's contents with their own code. This could lead to the execution of arbitrary code with the privileges of the ciborg process owner.

Recommendations For ciborg gem version 3.0.0, consider restricting access to the /tmp/perlbrew-installer file to prevent a malicious user from creating a symlink attack. As a temporary workaround, avoid using the chef/travis-cookbooks/ci environment/perlbrew/recipes/default.rb recipe until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-5003

GHSA-G982-9R8G-6QXW

Affected Products

Ciborg

References · 7

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ciborg/CVE-2014-5003.yml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5003 · Security Note
• https://osv.dev/vulnerability/GHSA-g982-9r8g-6qxw · Vendor Advisory
• http://openwall.com/lists/oss-security/2014/07/07/24 · Note
• http://vapid.dhs.org/advisories/ciborg-3.0.0.html · Note
• http://openwall.com/lists/oss-security/2014/07/17/5 · Note
• https://github.com/advisories/GHSA-g982-9r8g-6qxw · Note