Detections
Analytics
GLSA-200711-17 : Ruby on Rails: Multiple vulnerabilities
medium Nessus Plugin ID 28217
Synopsis
The remote Gentoo host is missing one or more security-related patches.Description
The remote host is affected by the vulnerability described in GLSA-200711-17 (Ruby on Rails: Multiple vulnerabilities)candlerb found that ActiveResource, when processing responses using the Hash.from_xml() function, does not properly sanitize filenames (CVE-2007-5380). The session management functionality allowed the 'session_id' to be set in the URL (CVE-2007-5380). BCC discovered that the to_json() function does not properly sanitize input before returning it to the user (CVE-2007-3227).
Impact :
Unauthenticated remote attackers could exploit these vulnerabilities to determine the existence of files or to read the contents of arbitrary XML files; conduct session fixation attacks and gain unauthorized access; and to execute arbitrary HTML and script code in a user's browser session in context of an affected site by enticing a user to browse a specially crafted URL.
Workaround :
There is no known workaround at this time.
Solution
All Ruby on Rails users should upgrade to the latest version:# emerge --sync # emerge --ask --oneshot --verbose '>=dev-ruby/rails-1.2.5'
See Also
Plugin Details
Severity: Medium
ID: 28217
File Name: gentoo_GLSA-200711-17.nasl
Version: 1.15
Type: local
Family: Gentoo Local Security Checks
Published: 11/15/2007
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.3
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:gentoo:linux:rails, cpe:/o:gentoo:linux
Required KB Items: Host/local_checks_enabled, Host/Gentoo/release, Host/Gentoo/qpkg-list
Patch Publication Date: 11/14/2007
Vulnerability Publication Date: 5/25/2007