CVE-2007-6077: Race Condition

Published Nov 21, 2007
·
Updated

The session fixation protection mechanism in cgiprocess.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookieonly attribute from the DEFAULTSESSIONOPTIONS constant, which effectively causes cookieonly to be applied only to the first instantiation of CgiRequest, which allows remote attackers to conduct session fixation attacks. NOTE: this is due to an incomplete fix for CVE-2007-5380.

Affected Software

278 affected componentsFixes available
rubygems/rails<1.2.6
1.2.6
rubyonrails Rails=0.9.1
rubyonrails Rails=0.9.2
rubyonrails Rails=0.9.3
rubyonrails Rails=0.9.4
rubyonrails Rails=0.9.4.1
rubyonrails Rails=0.10.0
rubyonrails Rails=0.10.1
rubyonrails Rails=0.11.0
rubyonrails Rails=0.11.1
rubyonrails Rails=0.12.0
rubyonrails Rails=0.12.1
rubyonrails Rails=0.13.0
rubyonrails Rails=0.13.1
rubyonrails Rails=0.14.1
rubyonrails Rails=0.14.2
rubyonrails Rails=0.14.3
rubyonrails Rails=0.14.4
rubyonrails Rails=1.0.0
rubyonrails Rails=1.1.0
rubyonrails Rails=1.1.1
rubyonrails Rails=1.1.2
rubyonrails Rails=1.1.3
rubyonrails Rails=1.1.4
rubyonrails Rails=1.1.5
rubyonrails Rails=1.1.6
rubyonrails Rails=1.2.0
rubyonrails Rails=1.2.1
rubyonrails Rails=1.2.2
rubyonrails Rails=1.2.3
rubyonrails Rails=1.2.4
rubyonrails Rails=1.2.5
rubyonrails Rails=1.2.6
rubyonrails Rails=1.9.5
rubyonrails Rails=2.0.0
rubyonrails Rails=2.0.0-rc1
rubyonrails Rails=2.0.0-rc2
rubyonrails Rails=2.0.1
rubyonrails Rails=2.0.2
rubyonrails Rails=2.0.4
rubyonrails Rails=2.1.0
rubyonrails Rails=2.1.1
rubyonrails Rails=2.1.2
rubyonrails Rails=2.2.0
rubyonrails Rails=2.2.1
rubyonrails Rails=2.2.2
rubyonrails Rails=2.3.2
rubyonrails Rails=2.3.3
rubyonrails Rails=2.3.4
rubyonrails Rails=2.3.9
rubyonrails Rails=2.3.10
rubyonrails Rails=2.3.11
rubyonrails Rails=2.3.12
rubyonrails Rails=3.0.0
rubyonrails Rails=3.0.0-beta
rubyonrails Rails=3.0.0-beta2
rubyonrails Rails=3.0.0-beta3
rubyonrails Rails=3.0.0-beta4
rubyonrails Rails=3.0.0-rc
rubyonrails Rails=3.0.0-rc2
rubyonrails Rails=3.0.1
rubyonrails Rails=3.0.1-pre
rubyonrails Rails=3.0.2
rubyonrails Rails=3.0.2-pre
rubyonrails Rails=3.0.3
rubyonrails Rails=3.0.4-rc1
rubyonrails Rails=3.0.5
rubyonrails Rails=3.0.5-rc1
rubyonrails Rails=3.0.6
rubyonrails Rails=3.0.6-rc1
rubyonrails Rails=3.0.6-rc2
rubyonrails Rails=3.0.7
rubyonrails Rails=3.0.7-rc1
rubyonrails Rails=3.0.7-rc2
rubyonrails Rails=3.0.8
rubyonrails Rails=3.0.8-rc1
rubyonrails Rails=3.0.8-rc2
rubyonrails Rails=3.0.8-rc3
rubyonrails Rails=3.0.8-rc4
rubyonrails Rails=3.0.9
rubyonrails Rails=3.0.9-rc1
rubyonrails Rails=3.0.9-rc2
rubyonrails Rails=3.0.9-rc3
rubyonrails Rails=3.0.9-rc4
rubyonrails Rails=3.0.9-rc5
rubyonrails Rails=3.0.10
rubyonrails Rails=3.0.10-rc1
rubyonrails Rails=3.0.11
rubyonrails Rails=3.0.12
rubyonrails Rails=3.0.12-rc1
rubyonrails Rails=3.0.13
rubyonrails Rails=3.0.13-rc1
rubyonrails Rails=3.0.14
rubyonrails Rails=3.1.0
rubyonrails Rails=3.1.0-beta1
rubyonrails Rails=3.1.0-rc1
rubyonrails Rails=3.1.0-rc2
rubyonrails Rails=3.1.0-rc3
rubyonrails Rails=3.1.0-rc4
rubyonrails Rails=3.1.0-rc5
rubyonrails Rails=3.1.0-rc6
rubyonrails Rails=3.1.0-rc7
rubyonrails Rails=3.1.0-rc8
rubyonrails Rails=3.1.1
rubyonrails Rails=3.1.1-rc1
rubyonrails Rails=3.1.1-rc2
rubyonrails Rails=3.1.1-rc3
rubyonrails Rails=3.1.2
rubyonrails Rails=3.1.2-rc1
rubyonrails Rails=3.1.2-rc2
rubyonrails Rails=3.1.3
rubyonrails Rails=3.1.4
rubyonrails Rails=3.1.4-rc1
rubyonrails Rails=3.1.5
rubyonrails Rails=3.1.5-rc1
rubyonrails Rails=3.1.6
rubyonrails Rails=3.2.0
rubyonrails Rails=3.2.0-rc1
rubyonrails Rails=3.2.0-rc2
rubyonrails Rails=3.2.1
rubyonrails Rails=3.2.2
rubyonrails Rails=3.2.2-rc1
rubyonrails Rails=3.2.3
rubyonrails Rails=3.2.3-rc1
rubyonrails Rails=3.2.3-rc2
rubyonrails Rails=3.2.4
rubyonrails Rails=3.2.4-rc1
rubyonrails Rails=3.2.5
rubyonrails Rails=3.2.6
rubyonrails ruby on Rails=0.5.0
rubyonrails ruby on Rails=0.5.5
rubyonrails ruby on Rails=0.5.6
rubyonrails ruby on Rails=0.5.7
rubyonrails ruby on Rails=0.6.0
rubyonrails ruby on Rails=0.6.5
rubyonrails ruby on Rails=0.7.0
rubyonrails ruby on Rails=0.8.0
rubyonrails ruby on Rails=0.8.5
rubyonrails ruby on Rails=0.9.0
rubyonrails ruby on Rails=3.0.4
rubyonrails ruby on Rails=0.8.0
rubyonrails ruby on Rails=0.5.7
rubyonrails ruby on Rails=0.7.0
rubyonrails ruby on Rails=0.8.5
rubyonrails ruby on Rails=0.6.0
rubyonrails ruby on Rails=0.5.6
rubyonrails ruby on Rails=0.9.0
rubyonrails ruby on Rails=0.5.5
rubyonrails ruby on Rails=0.5.0
rubyonrails ruby on Rails=0.6.5
rubyonrails ruby on Rails=3.0.4
rubyonrails Rails=0.9.1
rubyonrails Rails=0.9.2
rubyonrails Rails=0.9.3
rubyonrails Rails=0.9.4
rubyonrails Rails=0.9.4.1
rubyonrails Rails=0.10.0
rubyonrails Rails=0.10.1
rubyonrails Rails=0.11.0
rubyonrails Rails=0.11.1
rubyonrails Rails=0.12.0
rubyonrails Rails=0.12.1
rubyonrails Rails=0.13.0
rubyonrails Rails=0.13.1
rubyonrails Rails=0.14.1
rubyonrails Rails=0.14.2
rubyonrails Rails=0.14.3
rubyonrails Rails=0.14.4
rubyonrails Rails=1.0.0
rubyonrails Rails=1.1.1
rubyonrails Rails=1.1.2
rubyonrails Rails=1.1.3
rubyonrails Rails=1.1.4
rubyonrails Rails=1.1.5
rubyonrails Rails=1.1.6
rubyonrails Rails=1.2.1
rubyonrails Rails=1.2.2
rubyonrails Rails=1.2.3
rubyonrails Rails=1.2.5
rubyonrails Rails=1.2.6
rubyonrails Rails=1.9.5
rubyonrails Rails=1.1.0
rubyonrails Rails=1.2.0
rubyonrails Rails=2.0.1
rubyonrails Rails=2.0.2
rubyonrails Rails=2.0.4
rubyonrails Rails=2.1.0
rubyonrails Rails=2.1.1
rubyonrails Rails=2.1.2
rubyonrails Rails=2.2.0
rubyonrails Rails=2.2.1
rubyonrails Rails=2.2.2
rubyonrails Rails=2.3.2
rubyonrails Rails=2.3.3
rubyonrails Rails=2.3.4
rubyonrails Rails=2.3.9
rubyonrails Rails=2.3.10
rubyonrails Rails=2.3.11
rubyonrails Rails=2.3.12
rubyonrails Rails=2.0.0-rc1
rubyonrails Rails=2.0.0-rc2
rubyonrails Rails=2.0.0
rubyonrails Rails=3.0.0-beta
rubyonrails Rails=3.0.0-beta2
rubyonrails Rails=3.0.0-beta3
rubyonrails Rails=3.0.0-beta4
rubyonrails Rails=3.0.0-rc
rubyonrails Rails=3.0.0-rc2
rubyonrails Rails=3.0.1-pre
rubyonrails Rails=3.0.2-pre
rubyonrails Rails=3.0.0
rubyonrails Rails=3.0.10-rc1
rubyonrails Rails=3.0.10
rubyonrails Rails=3.0.12-rc1
rubyonrails Rails=3.0.12
rubyonrails Rails=3.0.13-rc1
rubyonrails Rails=3.0.13
rubyonrails Rails=3.1.0-beta1
rubyonrails Rails=3.1.0-rc1
rubyonrails Rails=3.1.0-rc2
rubyonrails Rails=3.1.0-rc3
rubyonrails Rails=3.1.0-rc4
rubyonrails Rails=3.1.0-rc5
rubyonrails Rails=3.1.0-rc6
rubyonrails Rails=3.1.0-rc7
rubyonrails Rails=3.1.0
rubyonrails Rails=3.1.0-rc8
rubyonrails Rails=3.1.1-rc1
rubyonrails Rails=3.1.1-rc2
rubyonrails Rails=3.1.1
rubyonrails Rails=3.1.1-rc3
rubyonrails Rails=3.1.2-rc1
rubyonrails Rails=3.1.2-rc2
rubyonrails Rails=3.1.2
rubyonrails Rails=3.1.4
rubyonrails Rails=3.1.4-rc1
rubyonrails Rails=3.1.5
rubyonrails Rails=3.1.5-rc1
rubyonrails Rails=3.2.0-rc1
rubyonrails Rails=3.2.0-rc2
rubyonrails Rails=3.2.0
rubyonrails Rails=3.0.1
rubyonrails Rails=3.0.2
rubyonrails Rails=3.0.3
rubyonrails Rails=3.0.11
rubyonrails Rails=3.0.14
rubyonrails Rails=3.1.3
rubyonrails Rails=3.1.6
rubyonrails Rails=3.2.1
rubyonrails Rails=3.2.5
rubyonrails Rails=3.2.6
rubyonrails Rails=3.0.4-rc1
rubyonrails Rails=3.0.5
rubyonrails Rails=3.0.5-rc1
rubyonrails Rails=3.0.6-rc1
rubyonrails Rails=3.0.6-rc2
rubyonrails Rails=3.0.6
rubyonrails Rails=3.0.7-rc1
rubyonrails Rails=3.0.7-rc2
rubyonrails Rails=3.0.7
rubyonrails Rails=3.0.8-rc1
rubyonrails Rails=3.0.8-rc2
rubyonrails Rails=3.0.8-rc3
rubyonrails Rails=3.0.8-rc4
rubyonrails Rails=3.0.8
rubyonrails Rails=3.0.9-rc1
rubyonrails Rails=3.0.9-rc2
rubyonrails Rails=3.0.9-rc3
rubyonrails Rails=3.0.9-rc4
rubyonrails Rails=3.0.9
rubyonrails Rails=3.0.9-rc5
rubyonrails Rails=3.2.2-rc1
rubyonrails Rails=3.2.2
rubyonrails Rails=3.2.3-rc1
rubyonrails Rails=3.2.3
rubyonrails Rails=3.2.3-rc2
rubyonrails Rails=3.2.4
rubyonrails Rails=3.2.4-rc1

Remediation

Patch Available

http://dev.rubyonrails.org/ticket/10048

Event History

Nov 21, 2007
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Oct 24, 2017
Advisory Published
06:33 PM
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2007-6077?

CVE-2007-6077 has a moderate severity rating due to its impact on session management in Ruby on Rails.

2

How do I fix CVE-2007-6077?

To fix CVE-2007-6077, upgrade Ruby on Rails to version 1.2.6 or later.

3

What versions of Rails are affected by CVE-2007-6077?

CVE-2007-6077 affects Rails version 1.2.4 and prior.

4

What type of vulnerability is CVE-2007-6077?

CVE-2007-6077 is a session fixation vulnerability that allows attackers to hijack user sessions.

5

Are newer versions of Rails secure against CVE-2007-6077?

Yes, newer versions of Rails after 1.2.6 are secure and do not contain the vulnerability described in CVE-2007-6077.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203