The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability. If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname substrings to write arbitrary files to the filesystem.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability.
    If a site allows uploading of .zip files, an attacker can upload a malicious file that uses ../ pathname     substrings to write arbitrary files to the filesystem. (CVE-2017-5946)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The Zip::File component in the rubyzip gem before 1.2.1 for Ruby has a directory traversal vulnerability.
    If a site allows uploading of .zip files, an attacker can upload a malicious file that uses "../" pathname
    substrings to write arbitrary files to the filesystem. (CVE-2017-5946)

This update for rubygem-rubyzip fixes the following issues :

  - CVE-2017-5946: A directory traversal vulnerability could     lead to access and overwrite files that are outside of     the restricted directory (boo#1027050)

It was discovered that libzip-ruby, a Ruby module for reading and writing zip files, is prone to a directory traversal vulnerability. An attacker can take advantage of this flaw to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.

For Debian 7 'Wheezy', these problems have been fixed in version 0.9.4-1+deb7u1.

We recommend that you upgrade your libzip-ruby packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that ruby-zip, a Ruby module for reading and writing zip files, is prone to a directory traversal vulnerability. An attacker can take advantage of this flaw to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.

ID	Name	Product	Family	Severity
255131	Linux Distros Unpatched Vulnerability : CVE-2017-5946	Nessus	Misc.	critical
422257	SCA: security update for rubyzip (GHSA-gcqq-w6gr-h9j9)	Tenable Cloud Security	SCA Checks	critical
422257	SCA: security update for rubyzip (GHSA-gcqq-w6gr-h9j9)	Tenable Self-Hosted Container Security	SCA Checks	critical
102336	openSUSE Security Update : rubygem-rubyzip (openSUSE-2017-900)	Nessus	SuSE Local Security Checks	critical
97559	Debian DLA-846-1 : libzip-ruby security update	Nessus	Debian Local Security Checks	critical
97529	Debian DSA-3801-1 : ruby-zip - security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2017-5946

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical