CVE-2007-5379 Moderate severity vulnerability that affects rails
MediumCVSS 5.0
EPSS 4.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers and ActiveResource servers to determine the existence of arbitrary files and read arbitrary XML files via the Hash.from_xml (Hash#from_xml) method, which uses XmlSimple (XML::Simple) unsafely, as demonstrated by reading passwords from the Pidgin (Gaim) .purple/accounts.xml file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| david hansson ruby on rails | <= 1.2.3 | No fix listed |
| rubygems rails(RubyGems) | < 1.2.4 | 1.2.4 |
| rubygems rails(RubyGems) | = 0.10.0 | No fix listed |
| rubygems rails(RubyGems) | = 0.10.1 | No fix listed |
| rubygems rails(RubyGems) | = 0.11.0 | No fix listed |
| rubygems rails(RubyGems) | = 0.11.1 | No fix listed |
| rubygems rails(RubyGems) | = 0.12.0 | No fix listed |
| rubygems rails(RubyGems) | = 0.12.1 | No fix listed |
| rubygems rails(RubyGems) | = 0.13.0 | No fix listed |
| rubygems rails(RubyGems) | = 0.13.1 | No fix listed |
| rubygems rails(RubyGems) | = 0.14.1 | No fix listed |
| rubygems rails(RubyGems) | = 0.14.2 | No fix listed |
| rubygems rails(RubyGems) | = 0.14.3 | No fix listed |
| rubygems rails(RubyGems) | = 0.14.4 | No fix listed |
| rubygems rails(RubyGems) | = 0.8.0 | No fix listed |
| rubygems rails(RubyGems) | = 0.8.5 | No fix listed |
| rubygems rails(RubyGems) | = 0.9.0 | No fix listed |
| rubygems rails(RubyGems) | = 0.9.1 | No fix listed |
| rubygems rails(RubyGems) | = 0.9.2 | No fix listed |
| rubygems rails(RubyGems) | = 0.9.3 | No fix listed |
| rubygems rails(RubyGems) | = 0.9.4 | No fix listed |
| rubygems rails(RubyGems) | = 0.9.4.1 | No fix listed |
| rubygems rails(RubyGems) | = 0.9.5 | No fix listed |
| rubygems rails(RubyGems) | = 1.0.0 | No fix listed |
| rubygems rails(RubyGems) | = 1.1.0 | No fix listed |
Show 13 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems rails(RubyGems) | = 1.1.1 | No fix listed |
| rubygems rails(RubyGems) | = 1.1.2 | No fix listed |
| rubygems rails(RubyGems) | = 1.1.3 | No fix listed |
| rubygems rails(RubyGems) | = 1.1.4 | No fix listed |
| rubygems rails(RubyGems) | = 1.1.5 | No fix listed |
| rubygems rails(RubyGems) | = 1.1.6 | No fix listed |
| rubygems rails(RubyGems) | = 1.2.0 | No fix listed |
| rubygems rails(RubyGems) | = 1.2.1 | No fix listed |
| rubygems rails(RubyGems) | = 1.2.2 | No fix listed |
| rubygems rails(RubyGems) | = 1.2.3 | No fix listed |
| debian/rails(Debian:12) | < 1.2.5-1 | 1.2.5-1 |
| debian/rails(Debian:13) | < 1.2.5-1 | 1.2.5-1 |
| debian/rails(Debian:14) | < 1.2.5-1 | 1.2.5-1 |
References
- bugs.gentoo.org
- dev.rubyonrails.org
- docs.info.apple.com
- APPLE-SA-2007-12-17 vendor-advisory
- 40717 vdb-entry
- 27657 third-party-advisory
- 28136 third-party-advisory
- GLSA-200711-17 vendor-advisory
- weblog.rubyonrails.org
- 26096 patch vdb-entry
- TA07-352A third-party-advisory us-government-resource
- ADV-2007-3508 vdb-entry
- ADV-2007-4238 vdb-entry
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com product
- github.com exploit
- rubyonrails.org
- web.archive.org
- Debian Security Tracker CVE-2007-5379 vendor-advisory
- github.com