Ruby on Rails Security Bypass and SQL Injection Vulnerabilities

Bugtraq ID:	46292
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-0448 CVE-2011-0449
Remote:	Yes
Local:	No
Published:	Feb 09 2011 12:00AM
Updated:	Apr 13 2015 09:59PM
Credit:	Jan M. Faber, supersaas and Eaden McKee, Webforce Ltd
Vulnerable:	Ruby on Rails Ruby on Rails 3.0.3 Ruby on Rails Ruby on Rails 3.0.2 Ruby on Rails Ruby on Rails 3.0.1 Ruby on Rails Ruby on Rails 3.0 Gentoo Linux
Not Vulnerable:	Ruby on Rails Ruby on Rails 3.0.4

Ruby on Rails Security Bypass and SQL Injection Vulnerabilities

Ruby on Rails is prone to a security-bypass vulnerability and an SQL-injection vulnerability.

An attacker can exploit the security-bypass vulnerability to bypass certain security restrictions and perform unauthorized actions.

An attacker can exploit the SQL-injection vulnerability to modify the logic of SQL queries. A successful exploit may allow the attacker to compromise the software, retrieve information, or modify data; other consequences are possible as well.

Ruby on Rails versions 3.0.0 through 3.0.3 are vulnerable.

Ruby on Rails Security Bypass and SQL Injection Vulnerabilities

An attacker can use a browser to exploit these issues.

Ruby on Rails Security Bypass and SQL Injection Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Ruby on Rails Security Bypass and SQL Injection Vulnerabilities

References:

• Filter Problems on Case-Insensitive Filesystems (Ruby on Rails)
  
• Potential SQL Injection in Rails 3.0.x (Ruby on Rails)
  
• Ruby on Rails Homepage (Ruby on Rails)