CVE-2011-1005: Medium severity ruby vulnerability
A security flaw was found in the Ruby method, translating message of the exception into string representation. An attacker could use this flaw to modify arbitrary untainted strings into their tainted equivalents by tricking the safe level mechanism of this method.
References: [1] http://www.ruby-lang.org/en/news/2011/02/18/exception-methods-can-bypass-safe/
Upstream patch (against ruby18 branch): [2] http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=30903
Other sources
The safe-level feature in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, and 1.8.8dev allows context-dependent attackers to modify strings via the Exception#tos method, as demonstrated by changing an intended pathname.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1005?
CVE-2011-1005 has been classified as a moderate severity vulnerability.
How do I fix CVE-2011-1005?
To fix CVE-2011-1005, upgrade to a patched version of Ruby that addresses this security flaw.
Which Ruby versions are affected by CVE-2011-1005?
CVE-2011-1005 affects Ruby versions 1.8.6, 1.8.7, and 1.8.8-dev.
What is the impact of CVE-2011-1005?
The impact of CVE-2011-1005 allows an attacker to manipulate arbitrary untainted strings if they successfully exploit the flaw.
Is CVE-2011-1005 associated with any exploit techniques?
CVE-2011-1005 can be exploited using manipulation of the safe level mechanism within Ruby.