Lucene search

[email protected]CVE-2007-6077

HistoryNov 21, 2007 - 9:46 p.m.

CVE-2007-6077

2007-11-2121:46:00

CWE-362

[email protected]

web.nvd.nist.gov

cve-2007-6077

ruby on rails

session fixation

cgi_process.rb

remote attack

security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.5 High

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.7%

JSON

The session fixation protection mechanism in cgi_process.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookie_only attribute from the DEFAULT_SESSION_OPTIONS constant, which effectively causes cookie_only to be applied only to the first instantiation of CgiRequest, which allows remote attackers to conduct session fixation attacks. NOTE: this is due to an incomplete fix for CVE-2007-5380.

Affected configurations

NVD

Node

rubyonrailsrailsMatch0.9.1

rubyonrailsrailsMatch0.9.2

rubyonrailsrailsMatch0.9.3

rubyonrailsrailsMatch0.9.4

rubyonrailsrailsMatch0.9.4.1

rubyonrailsrailsMatch0.10.0

rubyonrailsrailsMatch0.10.1

rubyonrailsrailsMatch0.11.0

rubyonrailsrailsMatch0.11.1

rubyonrailsrailsMatch0.12.0

rubyonrailsrailsMatch0.12.1

rubyonrailsrailsMatch0.13.0

rubyonrailsrailsMatch0.13.1

rubyonrailsrailsMatch0.14.1

rubyonrailsrailsMatch0.14.2

rubyonrailsrailsMatch0.14.3

rubyonrailsrailsMatch0.14.4

rubyonrailsrailsMatch1.0.0

rubyonrailsrailsMatch1.1.0

rubyonrailsrailsMatch1.1.1

rubyonrailsrailsMatch1.1.2

rubyonrailsrailsMatch1.1.3

rubyonrailsrailsMatch1.1.4

rubyonrailsrailsMatch1.1.5

rubyonrailsrailsMatch1.1.6

rubyonrailsrailsMatch1.2.0

rubyonrailsrailsMatch1.2.1

rubyonrailsrailsMatch1.2.2

rubyonrailsrailsMatch1.2.3

rubyonrailsrailsMatch1.2.4

rubyonrailsrailsMatch1.2.5

rubyonrailsrailsMatch1.2.6

rubyonrailsrailsMatch1.9.5

rubyonrailsrailsMatch2.0.0

rubyonrailsrailsMatch2.0.0rc1

rubyonrailsrailsMatch2.0.0rc2

rubyonrailsrailsMatch2.0.1

rubyonrailsrailsMatch2.0.2

rubyonrailsrailsMatch2.0.4

rubyonrailsrailsMatch2.1.0

rubyonrailsrailsMatch2.1.1

rubyonrailsrailsMatch2.1.2

rubyonrailsrailsMatch2.2.0

rubyonrailsrailsMatch2.2.1

rubyonrailsrailsMatch2.2.2

rubyonrailsrailsMatch2.3.2

rubyonrailsrailsMatch2.3.3

rubyonrailsrailsMatch2.3.4

rubyonrailsrailsMatch2.3.9

rubyonrailsrailsMatch2.3.10

rubyonrailsrailsMatch2.3.11

rubyonrailsrailsMatch2.3.12

rubyonrailsrailsMatch3.0.0

rubyonrailsrailsMatch3.0.0beta

rubyonrailsrailsMatch3.0.0beta2

rubyonrailsrailsMatch3.0.0beta3

rubyonrailsrailsMatch3.0.0beta4

rubyonrailsrailsMatch3.0.0rc

rubyonrailsrailsMatch3.0.0rc2

rubyonrailsrailsMatch3.0.1

rubyonrailsrailsMatch3.0.1pre

rubyonrailsrailsMatch3.0.2

rubyonrailsrailsMatch3.0.2pre

rubyonrailsrailsMatch3.0.3

rubyonrailsrailsMatch3.0.4rc1

rubyonrailsrailsMatch3.0.5

rubyonrailsrailsMatch3.0.5rc1

rubyonrailsrailsMatch3.0.6

rubyonrailsrailsMatch3.0.6rc1

rubyonrailsrailsMatch3.0.6rc2

rubyonrailsrailsMatch3.0.7

rubyonrailsrailsMatch3.0.7rc1

rubyonrailsrailsMatch3.0.7rc2

rubyonrailsrailsMatch3.0.8

rubyonrailsrailsMatch3.0.8rc1

rubyonrailsrailsMatch3.0.8rc2

rubyonrailsrailsMatch3.0.8rc3

rubyonrailsrailsMatch3.0.8rc4

rubyonrailsrailsMatch3.0.9

rubyonrailsrailsMatch3.0.9rc1

rubyonrailsrailsMatch3.0.9rc2

rubyonrailsrailsMatch3.0.9rc3

rubyonrailsrailsMatch3.0.9rc4

rubyonrailsrailsMatch3.0.9rc5

rubyonrailsrailsMatch3.0.10

rubyonrailsrailsMatch3.0.10rc1

rubyonrailsrailsMatch3.0.11

rubyonrailsrailsMatch3.0.12

rubyonrailsrailsMatch3.0.12rc1

rubyonrailsrailsMatch3.0.13

rubyonrailsrailsMatch3.0.13rc1

rubyonrailsrailsMatch3.0.14

rubyonrailsrailsMatch3.1.0

rubyonrailsrailsMatch3.1.0beta1

rubyonrailsrailsMatch3.1.0rc1

rubyonrailsrailsMatch3.1.0rc2

rubyonrailsrailsMatch3.1.0rc3

rubyonrailsrailsMatch3.1.0rc4

rubyonrailsrailsMatch3.1.0rc5

rubyonrailsrailsMatch3.1.0rc6

rubyonrailsrailsMatch3.1.0rc7

rubyonrailsrailsMatch3.1.0rc8

rubyonrailsrailsMatch3.1.1

rubyonrailsrailsMatch3.1.1rc1

rubyonrailsrailsMatch3.1.1rc2

rubyonrailsrailsMatch3.1.1rc3

rubyonrailsrailsMatch3.1.2

rubyonrailsrailsMatch3.1.2rc1

rubyonrailsrailsMatch3.1.2rc2

rubyonrailsrailsMatch3.1.3

rubyonrailsrailsMatch3.1.4

rubyonrailsrailsMatch3.1.4rc1

rubyonrailsrailsMatch3.1.5

rubyonrailsrailsMatch3.1.5rc1

rubyonrailsrailsMatch3.1.6

rubyonrailsrailsMatch3.2.0

rubyonrailsrailsMatch3.2.0rc1

rubyonrailsrailsMatch3.2.0rc2

rubyonrailsrailsMatch3.2.1

rubyonrailsrailsMatch3.2.2

rubyonrailsrailsMatch3.2.2rc1

rubyonrailsrailsMatch3.2.3

rubyonrailsrailsMatch3.2.3rc1

rubyonrailsrailsMatch3.2.3rc2

rubyonrailsrailsMatch3.2.4

rubyonrailsrailsMatch3.2.4rc1

rubyonrailsrailsMatch3.2.5

rubyonrailsrailsMatch3.2.6

rubyonrailsruby_on_railsMatch0.5.0

rubyonrailsruby_on_railsMatch0.5.5

rubyonrailsruby_on_railsMatch0.5.6

rubyonrailsruby_on_railsMatch0.5.7

rubyonrailsruby_on_railsMatch0.6.0

rubyonrailsruby_on_railsMatch0.6.5

rubyonrailsruby_on_railsMatch0.7.0

rubyonrailsruby_on_railsMatch0.8.0

rubyonrailsruby_on_railsMatch0.8.5

rubyonrailsruby_on_railsMatch0.9.0

rubyonrailsruby_on_railsMatch3.0.4

CPENameOperatorVersion
rubyonrails:railsrubyonrails railseq1.2.4

CPE	Name	Operator	Version
rubyonrails:rails	rubyonrails rails	eq	1.2.4

References

dev.rubyonrails.org/changeset/8177

dev.rubyonrails.org/ticket/10048

docs.info.apple.com/article.html?artnum=307179

lists.apple.com/archives/security-announce/2007/Dec/msg00002.html

secunia.com/advisories/27781

secunia.com/advisories/28136

weblog.rubyonrails.org/2007/11/24/ruby-on-rails-1-2-6-security-and-maintenance-release

www.securityfocus.com/bid/26598

www.us-cert.gov/cas/techalerts/TA07-352A.html

www.vupen.com/english/advisories/2007/4009

www.vupen.com/english/advisories/2007/4238

Social References

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

9.5 High

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.7%

JSON

Related for CVE-2007-6077

cvelist2 openvas8 ubuntucve2 nessus6 debiancve2 prion2 freebsd1 osv2 nvd2 github2 gentoo2 cve1 rubygems1 securityvulns2