Lucene search

RedhatCVE-2011-3187

HistoryAug 29, 2011 - 6:55 p.m.

CVE-2011-3187

2011-08-2918:55:01

CWE-20

redhat

web.nvd.nist.gov

ruby on rails

cve-2011-3187

log injection

remote attackers

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.016

Percentile

87.5%

JSON

The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip.rb in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header in requests from IP addresses on a Class C network, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted header.

Affected configurations

Nvd

Node

rubyonrailsrailsMatch3.0.5

VendorProductVersionCPE
rubyonrailsrails3.0.5cpe:2.3:a:rubyonrails:rails:3.0.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
rubyonrails	rails	3.0.5	cpe:2.3:a:rubyonrails:rails:3.0.5:::::::*

References

archives.neohapsis.com/archives/fulldisclosure/2011-02/0337.html

webservsec.blogspot.com/2011/02/ruby-on-rails-vulnerability.html

www.openwall.com/lists/oss-security/2011/08/17/1

www.openwall.com/lists/oss-security/2011/08/19/11

www.openwall.com/lists/oss-security/2011/08/20/1

www.openwall.com/lists/oss-security/2011/08/22/13

www.openwall.com/lists/oss-security/2011/08/22/14

www.openwall.com/lists/oss-security/2011/08/22/5

bugzilla.novell.com/show_bug.cgi?id=673010

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.016

Percentile

87.5%

JSON

Related for CVE-2011-3187