Ruby alias and directory operation security bypass
| ruby-alias-directory-security-bypass (27725) |  Medium Risk |
Description:
Ruby could allow an attacker to bypass security caused by an error in the alias functionality and by improper validation of directory operations. A local or remote attacker could exploit these vulnerabilities to bypass security and close certain directory streams.
Platforms Affected:
- Canonical, Ubuntu 5.04
- Canonical, Ubuntu 5.10
- Canonical, Ubuntu 6.06 LTS
- Debian, Debian Linux 3.1
- MandrakeSoft, Mandrake Linux 2006
- MandrakeSoft, Mandrake Linux 2006 X86_64
- MandrakeSoft, Mandrake Linux Corporate Server 3.0
- MandrakeSoft, Mandrake Linux Corporate Server 3.0 X86_64
- OpenPKG, OpenPKG 2-STABLE
- OpenPKG, OpenPKG 2.5
- OpenPKG, OpenPKG CURRENT
- RedHat, Enterprise Linux 2.1 WS
- RedHat, Enterprise Linux 2.1 AS
- RedHat, Enterprise Linux 2.1 ES
- RedHat, Enterprise Linux 3 ES
- RedHat, Enterprise Linux 3 WS
- RedHat, Enterprise Linux 3 AS
- RedHat, Enterprise Linux 3 Desktop
- RedHat, Enterprise Linux 4 ES
- RedHat, Enterprise Linux 4 Desktop
- RedHat, Enterprise Linux 4 WS
- RedHat, Enterprise Linux 4 AS
- RedHat, Linux Advanced Workstation 2.1 Itanium
- Yukihiro Matsumoto, Ruby 1.8.4 and prior
Remedy:
Apply the fix for this vulnerability, available from the Ruby CVS Repository. See References.
For Red Hat Linux:
Refer to RHSA-2006:0604-5 for patch, upgrade, or suggested workaround information. See References.
For Debian GNU/Linux:
Refer to DSA-1157-1 for patch, upgrade, or suggested workaround information. See References.
For OpenPKG:
Refer to OpenPKG Security Advisory OpenPKG-SA-2006-016 for patch, upgrade, or suggested workaround information. See References.
For other distributions:
Contact your vendor for upgrade or patch information.
Consequences:
Bypass Security
References:
- Ruby CVS Repository, Ruby CVS Repository Guide - Ruby Home Page at http://www.ruby-lang.org/en/20020106.html.
- Ruby Web site, Ruby Home Page at http://www.ruby-lang.org/.
- ASA-2006-150: ruby security update (RHSA-2006-0604)
- BID-18944: Yukihiro Matsumoto Ruby Multiple SAFE Level Restriction Bypass Vulnerabilities
- CVE-2006-3694: Multiple unspecified vulnerabilities in Ruby before 1.8.5 allow remote attackers to bypass safe level checks via unspecified vectors involving (1) the alias function and (2) directory operations.
- DSA-1139: ruby1.6 -- missing privilege checks
- DSA-1157: ruby1.8 -- several vulnerabilities
- MDKSA-2006:134: Updated ruby packages fix safe-level vulnerabilities
- OpenPKG-SA-2006.016: Ruby
- OSVDB ID: 27144: Ruby alias Function Safe Level Security Bypass
- OSVDB ID: 27145: Ruby Directory Operations Safe Level Security Bypass
- RHSA-2006-0604: ruby security update
- SA21009: Ruby Safe Level Security Bypass Vulnerabilities
- SUSE-SR:2006:021: SUSE Security Summary Report
- USN-325-1: ruby1.8 vulnerability
- VUPEN/ADV-2006-2760: Ruby Alias Functionality and Directory Operations Safe Level Security Bypass Vulnerabilities
Reported:
Jul 12, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net