Mongrel 'DirHandler' Class Directory Traversal Information Disclosure Vulnerability
BID:27133
Info
Mongrel 'DirHandler' Class Directory Traversal Information Disclosure Vulnerability
| Bugtraq ID: | 27133 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-6612 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 28 2007 12:00AM |
| Updated: | May 29 2008 05:53PM |
| Credit: | Eric Mason is credited with the discovery of this vulnerability. |
| Vulnerable: |
Mongrel Mongrel 1.1.2 Mongrel Mongrel 1.0.4 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.5 |
| Not Vulnerable: |
Mongrel Mongrel 1.1.3 Mongrel Mongrel 1.0.5 |
Discussion
Mongrel 'DirHandler' Class Directory Traversal Information Disclosure Vulnerability
Mongrel is prone to an information-disclosure vulnerability because it fails to sufficiently sanitize user-supplied input.
An attacker can exploit this issue to view sensitive files within the context of the webserver process. Information obtained may lead to other attacks.
This issue affects Mongrel 1.0.4 and versions prior to 1.1.3.
Mongrel is prone to an information-disclosure vulnerability because it fails to sufficiently sanitize user-supplied input.
An attacker can exploit this issue to view sensitive files within the context of the webserver process. Information obtained may lead to other attacks.
This issue affects Mongrel 1.0.4 and versions prior to 1.1.3.
Exploit / POC
Mongrel 'DirHandler' Class Directory Traversal Information Disclosure Vulnerability
Attackers can exploit this vulnerability with a browser.
Attackers can exploit this vulnerability with a browser.
Solution / Fix
Mongrel 'DirHandler' Class Directory Traversal Information Disclosure Vulnerability
Solution:
The vendor has released an update. Please see the references for more information.
Apple Mac OS X 10.5
Apple Mac OS X Server 10.5
Mongrel Mongrel 1.0.4
Mongrel Mongrel 1.1.2
Apple Mac OS X Server 10.4.11
Apple Mac OS X 10.4.11
Apple Mac OS X Server 10.5.1
Apple Mac OS X 10.5.1
Apple Mac OS X 10.5.2
Apple Mac OS X Server 10.5.2
Solution:
The vendor has released an update. Please see the references for more information.
Apple Mac OS X 10.5
-
Apple Security Update 2008-003 (Intel)
http://www.apple.com/support/downloads/securityupdate2008003intel.html -
Apple Security Update 2008-003 (PPC)
http://www.apple.com/support/downloads/securityupdate2008003ppc.html
Apple Mac OS X Server 10.5
-
Apple Security Update 2008-003 Server (PPC)
http://www.apple.com/support/downloads/securityupdate2008003serverppc. html -
Apple Security Update 2008-003 Server (Universal)
http://www.apple.com/support/downloads/securityupdate2008003serveruniv ersal.html
Mongrel Mongrel 1.0.4
-
Mongrel mongrel-1.0.5.tgz
http://rubyforge.org/frs/download.php/29896/mongrel-1.0.5.tgz
Mongrel Mongrel 1.1.2
-
Mongrel mongrel-1.1.3.tgz
http://rubyforge.org/frs/download.php/30048/mongrel-1.1.3.tgz
Apple Mac OS X Server 10.4.11
-
Apple Security Update 2008-003 Server (PPC)
http://www.apple.com/support/downloads/securityupdate2008003serverppc. html -
Apple Security Update 2008-003 Server (Universal)
http://www.apple.com/support/downloads/securityupdate2008003serveruniv ersal.html
Apple Mac OS X 10.4.11
-
Apple Security Update 2008-003 (Intel)
http://www.apple.com/support/downloads/securityupdate2008003intel.html -
Apple Security Update 2008-003 (PPC)
http://www.apple.com/support/downloads/securityupdate2008003ppc.html
Apple Mac OS X Server 10.5.1
-
Apple Security Update 2008-003 Server (PPC)
http://www.apple.com/support/downloads/securityupdate2008003serverppc. html -
Apple Security Update 2008-003 Server (Universal)
http://www.apple.com/support/downloads/securityupdate2008003serveruniv ersal.html
Apple Mac OS X 10.5.1
-
Apple Security Update 2008-003 (Intel)
http://www.apple.com/support/downloads/securityupdate2008003intel.html -
Apple Security Update 2008-003 (PPC)
http://www.apple.com/support/downloads/securityupdate2008003ppc.html
Apple Mac OS X 10.5.2
-
Apple Security Update 2008-003 (Intel)
http://www.apple.com/support/downloads/securityupdate2008003intel.html -
Apple Security Update 2008-003 (PPC)
http://www.apple.com/support/downloads/securityupdate2008003ppc.html
Apple Mac OS X Server 10.5.2
-
Apple Security Update 2008-003 Server (PPC)
http://www.apple.com/support/downloads/securityupdate2008003serverppc. html -
Apple Security Update 2008-003 Server (Universal)
http://www.apple.com/support/downloads/securityupdate2008003serveruniv ersal.html
References
Mongrel 'DirHandler' Class Directory Traversal Information Disclosure Vulnerability
References:
References:
- [Mongrel] Arbitrary system files readable in 1.0.4 - 1.1.2 (Eric Mason)
- Mongrel Homepage (Mongrel)