Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to modify arbitrary records by changing the names of parameters for form inputs.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Ruby on Rails 2.3.9 and 3.0.0 does not properly handle nested attributes, which allows remote attackers to
    modify arbitrary records by changing the names of parameters for form inputs. (CVE-2010-3933)

The remote host is affected by the vulnerability described in GLSA-201412-28 (Ruby on Rails: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Ruby on Rails. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could execute arbitrary code or cause a Denial of       Service condition. Furthermore, a remote attacker may be able to execute       arbitrary SQL commands, change parameter names for form inputs and make       changes to arbitrary records in the system, bypass intended access       restrictions, render arbitrary views, inject arbitrary web script or       HTML, or conduct cross-site request forgery (CSRF) attacks.
  Workaround :

    There is no known workaround at this time.

This update of rails fixes the following security issues :

CVE-2011-2930 - SQL-injection in quote_table_name function via specially crafted column names (bnc#712062) CVE-2011-2931 - Cross-Site Scripting (XSS) in the strip_tags helper (bnc#712057) CVE-2011-3186 - Response Splitting (bnc#712058) CVE-2010-3933 - Arbitrary modification of records via specially crafted form parameters (bnc#712058) CVE-2011-0446 - Cross-Site Scripting (XSS) in the mail_to helper (bnc#668817) CVE-2011-0447 - Improper validation of 'X-Requested-With' header (bnc#668817) CVE-2011-0448 - SQL-injection caused by improperly sanitized arguments to the limit function (bnc#668817) CVE-2011-0449 - Bypass of access restrictions via specially crafted action names (bnc#668817)

ID	Name	Product	Family	Type	Severity
421816	SCA: security update for activerecord (GHSA-gjxw-5w2q-7grf)	Tenable Cloud Security	SCA Checks	Local	medium
421816	SCA: security update for activerecord (GHSA-gjxw-5w2q-7grf)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
79981	GLSA-201412-28 : Ruby on Rails: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	critical
76016	openSUSE Security Update : rubygem-actionmailer (openSUSE-SU-2011:1305-1)	Nessus	SuSE Local Security Checks	Local	high
75730	openSUSE Security Update : rubygem-actionmailer (openSUSE-SU-2011:1305-1)	Nessus	SuSE Local Security Checks	Local	high

Detections

Analytics

CVE-2010-3933

medium

Tenable Plugins

medium

medium

critical

high

high