Ruby on Rails Routing Denial of Service Vulnerability

Bugtraq ID:	19454
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 09 2006 12:00AM
Updated:	Jan 16 2007 10:20PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 6.10 sparc Ubuntu Ubuntu Linux 6.10 powerpc Ubuntu Ubuntu Linux 6.10 i386 Ubuntu Ubuntu Linux 6.10 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise SDK 10 Ruby on Rails Ruby on Rails 1.1.5 Ruby on Rails Ruby on Rails 1.1.4 Ruby on Rails Ruby on Rails 1.1.2 Ruby on Rails Ruby on Rails 1.1.1 Ruby on Rails Ruby on Rails 1.1 Gentoo Linux
Not Vulnerable:	Ruby on Rails Ruby on Rails 1.1.6

Ruby on Rails Routing Denial of Service Vulnerability

Ruby on Rails is prone to a vulnerability in its routing functionality that may result in denial-of-service or data loss issues.

Attackers may exploit this issue by issuing HTTP GET requests to predictable URIs to affected webservers.

This issue affects Ruby on Rails versions 1.1.0, 1.1.1, 1.1.2, 1.1.4, and 1.1.5.

Ruby on Rails Routing Denial of Service Vulnerability

Attackers use a browser to exploit this issue.

Ruby on Rails Routing Denial of Service Vulnerability

Solution:
To address this issue, the vendor has released version 1.1.6 of Ruby on Rails as well as patches for previous versions.

Please see the references for more information and vendor advisories.


Ruby on Rails Ruby on Rails 1.1

• Ruby on Rails rel_1-1-0.diff
  http://www.rubyonrails.org/files/aug_10_security/rel_1-1-0.diff

Ruby on Rails Ruby on Rails 1.1.1

• Ruby on Rails rel_1-1-1.diff
  http://www.rubyonrails.org/files/aug_10_security/rel_1-1-1.diff

Ruby on Rails Ruby on Rails 1.1.2

• Ruby on Rails rel_1-1-2.diff
  http://www.rubyonrails.org/files/aug_10_security/rel_1-1-2.diff

Ruby on Rails Ruby on Rails 1.1.4

• Ruby on Rails rel_1-1-4.diff
  http://www.rubyonrails.org/files/aug_10_security/rel_1-1-4.diff

Ruby on Rails Ruby on Rails 1.1.5

• Ruby on Rails rails-1.1.6.tgz
  http://rubyforge.org/frs/download.php/12323/rails-1.1.6.tgz

Ruby on Rails Routing Denial of Service Vulnerability

References:

• Rails 1.1.5: Mandatory security patch (and more) (Ruby on Rails)
  
• Rails 1.1.6, backports, and full disclosure (Ruby on Rails)
  
• Ruby on Rails Homepage (Ruby on Rails)
  
• Security update: Rails 1.0, 1.1.3 not affected (Ruby on Rails)