CVE-2012-2660 Action Pack contains database-query restrictions bypass
MediumCVSS 6.4
EPSS 4.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.0.13, 3.1.x before 3.1.5, and 3.2.x before 3.2.4 does not properly consider differences in parameter handling between the Active Record component and the Rack interface, which allows remote attackers to bypass intended database-query restrictions and perform NULL checks via a crafted request, as demonstrated by certain "[nil]" values, a related issue to CVE-2012-2694.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems actionpack(RubyGems) | >= 3.0.0.beta, < 3.0.13 | 3.0.13 |
| rubygems actionpack(RubyGems) | = 3.0.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.0.beta | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.0.beta2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.0.beta3 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.0.beta4 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.0.rc | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.0.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.10 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.10.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.11 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.12 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.12.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.13.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.3 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.4 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.4.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.5 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.5.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.6 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.6.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.6.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.7 | No fix listed |
Show 164 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems actionpack(RubyGems) | = 3.0.7.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.7.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.8 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.8.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.8.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.8.rc4 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.9 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.9.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.9.rc3 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.9.rc4 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.0.9.rc5 | No fix listed |
| rubygems actionpack(RubyGems) | >= 3.1.0, < 3.1.5 | 3.1.5 |
| rubygems actionpack(RubyGems) | = 3.1.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.1.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.1.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.1.rc3 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.2.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.2.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.3 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.4 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.4.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.1.5.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | >= 3.2.0, < 3.2.4 | 3.2.4 |
| rubygems actionpack(RubyGems) | = 3.2.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.2.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.3 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.3.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.3.rc2 | No fix listed |
| rubygems actionpack(RubyGems) | = 3.2.4.rc1 | No fix listed |
| rubygems actionpack(RubyGems) | < 2.3.16 | 2.3.16 |
| rubygems actionpack(RubyGems) | = 0.9.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 0.9.5 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.0.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.0.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.1.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.10.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.10.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.11.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.11.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.11.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.12.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.12.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.12.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.12.3 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.12.4 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.12.5 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.13.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.13.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.13.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.13.3 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.13.4 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.13.5 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.13.6 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.2.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.3.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.3.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.4.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.5.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.5.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.6.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.7.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.8.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.8.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.9.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 1.9.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.0.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.0.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.0.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.0.4 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.0.5 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.1.0 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.1.1 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.1.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.2.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.2.3 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.10 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.11 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.12 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.14 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.15 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.2 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.3 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.4 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.5 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.6 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.7 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.8 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.8.pre1 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.9 | No fix listed |
| rubygems actionpack(RubyGems) | = 2.3.9.pre | No fix listed |
| rubyonrails rails | = 3.0.0 | No fix listed |
| rubyonrails rails | = 3.0.0-beta | No fix listed |
| rubyonrails rails | = 3.0.0-beta2 | No fix listed |
| rubyonrails rails | = 3.0.0-beta3 | No fix listed |
| rubyonrails rails | = 3.0.0-beta4 | No fix listed |
| rubyonrails rails | = 3.0.0-rc | No fix listed |
| rubyonrails rails | = 3.0.0-rc2 | No fix listed |
| rubyonrails rails | = 3.0.1 | No fix listed |
| rubyonrails rails | = 3.0.1-pre | No fix listed |
| rubyonrails rails | = 3.0.2 | No fix listed |
| rubyonrails rails | = 3.0.2-pre | No fix listed |
| rubyonrails rails | = 3.0.3 | No fix listed |
| rubyonrails rails | = 3.0.4-rc1 | No fix listed |
| rubyonrails rails | = 3.0.5 | No fix listed |
| rubyonrails rails | = 3.0.5-rc1 | No fix listed |
| rubyonrails rails | = 3.0.6 | No fix listed |
| rubyonrails rails | = 3.0.6-rc1 | No fix listed |
| rubyonrails rails | = 3.0.6-rc2 | No fix listed |
| rubyonrails rails | = 3.0.7 | No fix listed |
| rubyonrails rails | = 3.0.7-rc1 | No fix listed |
| rubyonrails rails | = 3.0.7-rc2 | No fix listed |
| rubyonrails rails | = 3.0.8 | No fix listed |
| rubyonrails rails | = 3.0.8-rc1 | No fix listed |
| rubyonrails rails | = 3.0.8-rc2 | No fix listed |
| rubyonrails rails | = 3.0.8-rc3 | No fix listed |
| rubyonrails rails | = 3.0.8-rc4 | No fix listed |
| rubyonrails rails | = 3.0.9 | No fix listed |
| rubyonrails rails | = 3.0.9-rc1 | No fix listed |
| rubyonrails rails | = 3.0.9-rc2 | No fix listed |
| rubyonrails rails | = 3.0.9-rc3 | No fix listed |
| rubyonrails rails | = 3.0.9-rc4 | No fix listed |
| rubyonrails rails | = 3.0.9-rc5 | No fix listed |
| rubyonrails rails | = 3.0.10 | No fix listed |
| rubyonrails rails | = 3.0.10-rc1 | No fix listed |
| rubyonrails rails | = 3.0.11 | No fix listed |
| rubyonrails rails | = 3.0.12 | No fix listed |
| rubyonrails rails | = 3.0.12-rc1 | No fix listed |
| rubyonrails rails | = 3.0.13-rc1 | No fix listed |
| rubyonrails rails | = 3.1.0 | No fix listed |
| rubyonrails rails | = 3.1.0-beta1 | No fix listed |
| rubyonrails rails | = 3.1.0-rc1 | No fix listed |
| rubyonrails rails | = 3.1.0-rc2 | No fix listed |
| rubyonrails rails | = 3.1.0-rc3 | No fix listed |
| rubyonrails rails | = 3.1.0-rc4 | No fix listed |
| rubyonrails rails | = 3.1.0-rc5 | No fix listed |
| rubyonrails rails | = 3.1.0-rc6 | No fix listed |
| rubyonrails rails | = 3.1.0-rc7 | No fix listed |
| rubyonrails rails | = 3.1.0-rc8 | No fix listed |
| rubyonrails rails | = 3.1.1 | No fix listed |
| rubyonrails rails | = 3.1.1-rc1 | No fix listed |
| rubyonrails rails | = 3.1.1-rc2 | No fix listed |
| rubyonrails rails | = 3.1.1-rc3 | No fix listed |
| rubyonrails rails | = 3.1.2 | No fix listed |
| rubyonrails rails | = 3.1.2-rc1 | No fix listed |
| rubyonrails rails | = 3.1.2-rc2 | No fix listed |
| rubyonrails rails | = 3.1.3 | No fix listed |
| rubyonrails rails | = 3.1.4 | No fix listed |
| rubyonrails rails | = 3.1.4-rc1 | No fix listed |
| rubyonrails rails | = 3.1.5-rc1 | No fix listed |
| rubyonrails rails | = 3.2.0 | No fix listed |
| rubyonrails rails | = 3.2.0-rc1 | No fix listed |
| rubyonrails rails | = 3.2.0-rc2 | No fix listed |
| rubyonrails rails | = 3.2.1 | No fix listed |
| rubyonrails rails | = 3.2.2 | No fix listed |
| rubyonrails rails | = 3.2.2-rc1 | No fix listed |
| rubyonrails rails | = 3.2.3 | No fix listed |
| rubyonrails rails | = 3.2.3-rc1 | No fix listed |
| rubyonrails rails | = 3.2.3-rc2 | No fix listed |
| rubyonrails rails | = 3.2.4-rc1 | No fix listed |
| rubyonrails ruby on rails | = 3.0.4 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com product
- github.com exploit
- github.com exploit
- groups.google.com
- [rubyonrails-security] 20120531 Unsafe Query Generation Risk in Ruby on Rails (CVE-2012-2660) exploit mailing-list
- openSUSE-SU-2012:0978 vendor-advisory
- SUSE-SU-2012:1012 vendor-advisory
- SUSE-SU-2012:1014 vendor-advisory
- SUSE-SU-2012:1015 vendor-advisory
- openSUSE-SU-2012:1066 vendor-advisory
- RHSA-2013:0154 vendor-advisory
- github.com