CVE-2013-0263 Rack arbitrary code execution via timing attack
MediumCVSS 5.1
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems rack(RubyGems) | >= 1.5.0, < 1.5.2 | 1.5.2 |
| rubygems rack(RubyGems) | >= 1.4.0, < 1.4.5 | 1.4.5 |
| rubygems rack(RubyGems) | >= 1.3.0, < 1.3.10 | 1.3.10 |
| rubygems rack(RubyGems) | >= 1.2.0, < 1.2.8 | 1.2.8 |
| rubygems rack(RubyGems) | >= 1.1.0, < 1.1.6 | 1.1.6 |
| rubygems rack(RubyGems) | = 1.5.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.5.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.4.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.4.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.4.2 | No fix listed |
| rubygems rack(RubyGems) | = 1.4.3 | No fix listed |
| rubygems rack(RubyGems) | = 1.4.4 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.2 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.3 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.4 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.5 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.6 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.7 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.8 | No fix listed |
| rubygems rack(RubyGems) | = 1.3.9 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.2 | No fix listed |
Show 43 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems rack(RubyGems) | = 1.2.3 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.4 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.5 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.6 | No fix listed |
| rubygems rack(RubyGems) | = 1.2.7 | No fix listed |
| rubygems rack(RubyGems) | = 1.1.0 | No fix listed |
| rubygems rack(RubyGems) | = 1.1.1 | No fix listed |
| rubygems rack(RubyGems) | = 1.1.1.pre | No fix listed |
| rubygems rack(RubyGems) | = 1.1.2 | No fix listed |
| rubygems rack(RubyGems) | = 1.1.3 | No fix listed |
| rubygems rack(RubyGems) | = 1.1.4 | No fix listed |
| rubygems rack(RubyGems) | = 1.1.5 | No fix listed |
| debian/ruby-rack(Debian:12) | < 1.4.1-2.1 | 1.4.1-2.1 |
| debian/ruby-rack(Debian:13) | < 1.4.1-2.1 | 1.4.1-2.1 |
| debian/ruby-rack(Debian:14) | < 1.4.1-2.1 | 1.4.1-2.1 |
| rack project rack | = 1.5.0 | No fix listed |
| rack project rack | = 1.5.1 | No fix listed |
| rack project rack | = 1.4.0 | No fix listed |
| rack project rack | = 1.4.1 | No fix listed |
| rack project rack | = 1.4.2 | No fix listed |
| rack project rack | = 1.4.3 | No fix listed |
| rack project rack | = 1.4.4 | No fix listed |
| rack project rack | = 1.3.0 | No fix listed |
| rack project rack | = 1.3.1 | No fix listed |
| rack project rack | = 1.3.2 | No fix listed |
| rack project rack | = 1.3.3 | No fix listed |
| rack project rack | = 1.3.4 | No fix listed |
| rack project rack | = 1.3.5 | No fix listed |
| rack project rack | = 1.3.6 | No fix listed |
| rack project rack | = 1.3.7 | No fix listed |
| rack project rack | = 1.3.8 | No fix listed |
| rack project rack | = 1.3.9 | No fix listed |
| rack project rack | = 1.2.0 | No fix listed |
| rack project rack | = 1.2.1 | No fix listed |
| rack project rack | = 1.2.2 | No fix listed |
| rack project rack | = 1.2.3 | No fix listed |
| rack project rack | = 1.2.4 | No fix listed |
| rack project rack | = 1.2.6 | No fix listed |
| rack project rack | = 1.2.7 | No fix listed |
| rack project rack | = 1.1.0 | No fix listed |
| rack project rack | = 1.1.4 | No fix listed |
| rack project rack | = 1.1.5 | No fix listed |
| rack project rack | = 1.1.6 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com patch
- bugzilla.redhat.com
- gist.github.com
- groups.google.com
- groups.google.com
- openSUSE-SU-2013:0462 vendor-advisory
- RHSA-2013:0686 vendor-advisory
- DSA-2783 vendor-advisory
- github.com
- github.com
- Debian Security Tracker CVE-2013-0263 vendor-advisory
- rack.github.com vendor-advisory
- 52033 third-party-advisory vendor-advisory
- 52134 third-party-advisory vendor-advisory
- 52774 third-party-advisory
- 89939 vdb-entry
- puppet.com
- twitter.com
- bugs.debian.org issue-tracking