This update improves the escaping in the helper code of Ruby on Rails to protect against XSS attacks (CVE-2009-3009) and an information leak (CVE-2009-3086).

Web アプリケーションのフレームワークである Ruby on Rails において 2 つの脆弱性が発見されました。Common Vulnerabilities and Exposuresプロジェクトは次の問題を特定しています：

  - CVE-2009-3086 クッキーストアはタイミング攻撃に脆弱な場合があるため、リモートの攻撃者は、メッセージダイジェストを偽造できる場合があります。

  - CVE-2009-4214 strip_tags 関数にクロスサイトスクリプティングの脆弱性があるため、ユーザーの支援を受けたリモートの攻撃者は、任意の Web スクリプトを注入することができます。

在 Web 应用程序框架 Ruby on Rails 中发现两个漏洞。通用漏洞和暴露计划识别以下问题：

- CVE-2009-3086 cookie 存储可能容易遭受时序攻击，可能允许远程攻击者伪造消息摘要。

- CVE-2009-4214 strip_tags 函数中有一个跨站脚本漏洞，允许受用户协助的远程攻击者注入任意 Web 脚本。

在 web 應用程式架構 Ruby on Rails 中發現兩個弱點。Common Vulnerabilities and Exposures 專案發現下列問題：

- CVE-2009-3086 cookie 存放區可能容易遭受定時攻擊，可能允許遠端攻擊者偽造訊息摘要。

- CVE-2009-4214 strip_tags 函式中有一個跨網站指令碼弱點，允許使用者協助的遠端攻擊者插入任意 web 指令碼。

Two vulnerabilities were discovered in Ruby on Rails, a web application framework. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2009-3086     The cookie store may be vulnerable to a timing attack,     potentially allowing remote attackers to forge message     digests.

  - CVE-2009-4214     A cross-site scripting vulnerability in the strip_tags     function allows remote user-assisted attackers to inject     arbitrary web script.

The remote host is affected by the vulnerability described in GLSA-200912-02 (Ruby on Rails: Multiple vulnerabilities)

    The following vulnerabilities were discovered:
    sameer     reported that lib/action_controller/cgi_process.rb removes the     :cookie_only attribute from the default session options     (CVE-2007-6077), due to an incomplete fix for CVE-2007-5380 (GLSA     200711-17).
    Tobias Schlottke reported that the :limit and     :offset parameters of ActiveRecord::Base.find() are not properly     sanitized before being processed (CVE-2008-4094).
    Steve from     Coderrr reported that the CRSF protection in protect_from_forgery()     does not parse the text/plain MIME format (CVE-2008-7248).
    Nate reported a documentation error that leads to the assumption     that a block returning nil passed to     authenticate_or_request_with_http_digest() would deny access to the     requested resource (CVE-2009-2422).
    Brian Mastenbrook reported     an input sanitation flaw, related to multibyte characters     (CVE-2009-3009).
    Gabe da Silveira reported an input sanitation     flaw in the strip_tags() function (CVE-2009-4214).
    Coda Hale     reported an information disclosure vulnerability related to HMAC     digests (CVE-2009-3086).
  Impact :

    A remote attacker could send specially crafted requests to a vulnerable     application, possibly leading to the execution of arbitrary SQL     statements or a circumvention of access control. A remote attacker     could also conduct session fixation attacks to hijack a user's session     or bypass the CSRF protection mechanism, or furthermore conduct     Cross-Site Scripting attacks or forge a digest via multiple attempts.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
42204	openSUSE Security Update : rubygem-actionpack-2_1 (rubygem-actionpack-2_1-1320)	Nessus	SuSE Local Security Checks	2009/10/22	2021/1/14	medium
42205	openSUSE Security Update : rubygem-activesupport-2_1 (rubygem-activesupport-2_1-1321)	Nessus	SuSE Local Security Checks	2009/10/22	2021/1/14	medium
55136	Debian DSA-2260-1：rails - いくつかの脆弱性	Nessus	Debian Local Security Checks	2011/6/15	2021/1/4	medium
55136	Debian DSA-2260-1：Rails - 多个漏洞	Nessus	Debian Local Security Checks	2011/6/15	2021/1/4	medium
55136	Debian DSA-2260-1 : rails - 數個弱點	Nessus	Debian Local Security Checks	2011/6/15	2021/1/4	medium
55136	Debian DSA-2260-1 : rails - several vulnerabilities	Nessus	Debian Local Security Checks	2011/6/15	2021/1/4	medium
43378	GLSA-200912-02 : Ruby on Rails: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2009/12/22	2021/1/6	high

检测

插件搜索

medium

medium

medium

medium

medium

medium

high