CVE-2011-0449: High severity ruby on rails vulnerability

Published Feb 21, 2011

Updated

actionpack/lib/actionview/template/resolver.rb in Ruby on Rails 3.0.x before 3.0.4, when a case-insensitive filesystem is used, does not properly implement filters associated with the list of available templates, which allows remote attackers to bypass intended access restrictions via an action name that uses an unintended case for alphabetic characters.

Affected Software

13 affected components

rubyonrails Rails=3.0.0-beta

rubyonrails Rails=3.0.0-beta2

rubyonrails Rails=3.0.0-beta3

rubyonrails Rails=3.0.0-beta4

rubyonrails Rails=3.0.0-rc

rubyonrails Rails=3.0.0-rc2

rubyonrails Rails=3.0.1-pre

rubyonrails Rails=3.0.2-pre

rubyonrails Rails=3.0.0

rubyonrails Rails=3.0.1

rubyonrails Rails=3.0.2

rubyonrails Rails=3.0.3

rubyonrails Rails=3.0.4-rc1

Remediation

Patch Available

http://weblog.rubyonrails.org/2011/2/8/new-releases-2-3-11-and-3-0-4

Event History

Feb 21, 2011

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-0449?

CVE-2011-0449 has been classified with a significant severity rating due to its potential to allow unauthorized access.

How do I fix CVE-2011-0449?

To fix CVE-2011-0449, update Ruby on Rails to version 3.0.4 or later.

Which versions of Ruby on Rails are affected by CVE-2011-0449?

CVE-2011-0449 affects Ruby on Rails 3.0.x versions prior to 3.0.4.

What type of attacks could exploit CVE-2011-0449?

CVE-2011-0449 could be exploited by attackers to bypass access restrictions on templates.

Is CVE-2011-0449 related to case sensitivity in filesystems?

Yes, CVE-2011-0449 exploits issues that arise when using case-insensitive filesystems.