Ruby on Rails Message Digest Verification Security Weakness

Bugtraq ID:	37427
Class:	Design Error
CVE:	CVE-2009-3086
Remote:	Yes
Local:	No
Published:	Sep 04 2009 12:00AM
Updated:	Jun 15 2011 04:20PM
Credit:	Coda Hale
Vulnerable:	Ruby on Rails Ruby on Rails 2.3.3 Ruby on Rails Ruby on Rails 2.3.2 Ruby on Rails Ruby on Rails 2.2.2 Ruby on Rails Ruby on Rails 2.1.1 Ruby on Rails Ruby on Rails 2.1 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:	Ruby on Rails Ruby on Rails 2.3.4 Ruby on Rails Ruby on Rails 2.2.3

Ruby on Rails Message Digest Verification Security Weakness

Ruby on Rails is prone to a weakness in the way it verifies message digests in the cookie store.

Successfully exploiting this issue may allow an attacker to determine when a forged signature is partially correct and then forge a message digest.

The issue affects versions prior to Ruby on Rails 2.3.4 and 2.2.3.

Ruby on Rails Message Digest Verification Security Weakness

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Ruby on Rails Message Digest Verification Security Weakness

Solution:
The vendor has released updates. Please see the references for details.

Ruby on Rails Message Digest Verification Security Weakness

References:

• Ruby on Rails Homepage (Ruby on Rails)
  
• Timing Weakness in Ruby on Rails (Ruby on Rails)