Lucene search
RubySecRUBY:ACTIONPACK-2011-0449HistoryOct 23, 2017 - 9:00 p.m.
Filter Problems on Case-Insensitive Filesystems in rails/actionpack
2017-10-2321:00:00
RubySec
rubysec.com
5
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
actionpack/lib/action_view/template/resolver.rb in Ruby on Rails 3.0.x
before 3.0.4, when a case-insensitive filesystem is used, does not
properly implement filters associated with the list of available
templates, which allows remote attackers to bypass intended access
restrictions via an action name that uses an unintended case for
alphabetic characters.
Affected configurations
Node
rubyactionpackRange<3.0.4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ruby | actionpack | * | cpe:2.3:a:ruby:actionpack:*:*:*:*:*:*:*:* |
Related
osv
osv
actionpack allows remote attackers to bypass intended access restrictions
2017-10-24 18:33:38
cve
cve
CVE-2011-0449
2011-02-21 18:00:01
prion
prion
Design/Logic Flaw
2011-02-21 18:00:00
nvd
nvd
CVE-2011-0449
2011-02-21 18:00:01
debiancve
debiancve
CVE-2011-0449
2011-02-21 18:00:01
gitlab
gitlab
High severity vulnerability that affects actionpack
2017-10-24 00:00:00
cvelist
cvelist
CVE-2011-0449
2011-02-21 17:00:00
github
github
actionpack allows remote attackers to bypass intended access restrictions
2017-10-24 18:33:38
ubuntucve
ubuntucve
CVE-2011-0449
2011-02-21 00:00:00
seebug
seebug
Ruby on Rails安全限制绕过和SQL注入漏洞
2011-04-08 00:00:00
openvas
openvas
Ruby on Rails Security Bypass and SQL Injection Vulnerabilities
2011-02-28 00:00:00
Gentoo Security Advisory GLSA 201412-28
2015-09-29 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: rubygem-activemodel-3.0.5-1.fc15
2011-04-05 21:43:08
[SECURITY] Fedora 15 Update: rubygem-activerecord-3.0.5-1.fc15
2011-04-05 21:43:08
[SECURITY] Fedora 15 Update: rubygem-activeresource-3.0.5-1.fc15
2011-04-05 21:43:08
nessus
nessus
Fedora 15 : rubygem-actionmailer-3.0.5-1.fc15 / rubygem-actionpack-3.0.5-1.fc15 / etc (2011-4358)
2011-04-06 00:00:00
openSUSE Security Update : rubygem-actionmailer (openSUSE-SU-2011:1305-1)
2014-06-13 00:00:00
openSUSE Security Update : rubygem-actionmailer (openSUSE-SU-2011:1305-1)
2014-06-13 00:00:00
gentoo
gentoo
Ruby on Rails: Multiple vulnerabilities
2014-12-14 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for RUBY:ACTIONPACK-2011-0449