bundler-audit 0.1.1 → 0.1.2

data/data/{bundler/audit/rails → ruby-advisory-db/gems/activerecord}/2013-0155.yml

@@ -1,7 +1,8 @@
----
+--- 
+gem: activerecord
+cve: 2013-0155
 url: http://osvdb.org/show/osvdb/89025
-title: |
-  Ruby on Rails Active Record JSON Parameter Parsing Query Bypass 
+title: Ruby on Rails Active Record JSON Parameter Parsing Query Bypass 
 
 description: |
   Ruby on Rails contains a flaw in the Active Record. The issue is due to an
@@ -13,7 +14,8 @@ description: |
 
 cvss_v2: 10.0
 
-patched_versions:
+patched_versions: 
+  - ~> 2.3.16
   - ~> 3.0.19
   - ~> 3.1.10
   - ">= 3.2.11"

data/data/{bundler/audit/rails → ruby-advisory-db/gems/activerecord}/2013-0276.yml

@@ -1,6 +1,8 @@
----
+--- 
+gem: activerecord
+cve: 2013-0276
 url: http://direct.osvdb.org/show/osvdb/90072
-title: Ruby on Rails Active Record attr_protected Method Bypass 
+title: Ruby on Rails Active Record attr_protected Method Bypass
 
 description: |
   Ruby on Rails contains a flaw in the attr_protected method of the
@@ -10,7 +12,7 @@ description: |
 
 cvss_v2: 5.0
 
-patched_versions:
+patched_versions: 
   - ~> 2.3.17
   - ~> 3.1.11
   - ">= 3.2.12"

data/data/{bundler/audit/rails → ruby-advisory-db/gems/activerecord}/2013-0277.yml

@@ -1,6 +1,8 @@
----
+--- 
+gem: activerecord
+cve: 2013-0277
 url: http://direct.osvdb.org/show/osvdb/90073
-title: |
+title:
   Ruby on Rails Active Record +serialize+ Helper YAML Attribute Handling Remote
   Code Execution 
 
@@ -13,6 +15,6 @@ description: |
 
 cvss_v2: 10.0
 
-patched_versions:
+patched_versions: 
   - ~> 2.3.17
   - ">= 3.1.0"

data/data/ruby-advisory-db/gems/activesupport/2012-1098.yml

@@ -0,0 +1,20 @@
+--- 
+gem: activesupport
+cve: 2012-1098
+url: http://osvdb.org/79726
+title: Ruby on Rails SafeBuffer Object [] Direct Manipulation XSS
+
+description: |
+  Ruby on Rails contains a flaw that allows a remote cross-site scripting (XSS)
+  attack. This flaw exists because athe application does not validate direct
+  manipulations of SafeBuffer objects via '[]' and other methods. This may
+  allow a user to create a specially crafted request that would execute
+  arbitrary script code in a user's browser within the trust relationship
+  between their browser and the server.
+
+cvss_v2: 4.3
+
+patched_versions: 
+  - ~> 3.0.12
+  - ~> 3.1.4
+  - ">= 3.2.2"

data/data/ruby-advisory-db/gems/activesupport/2012-3464.yml

@@ -0,0 +1,20 @@
+--- 
+gem: activesupport
+cve: 2012-3464
+url: http://www.osvdb.org/show/osvdb/84516
+title: Ruby on Rails HTML Escaping Code XSS
+
+description: |
+  Ruby on Rails contains a flaw that allows a remote cross-site scripting (XSS)
+  attack. This flaw exists because the HTML escaping code functionality does
+  not properly escape a single quote character. This may allow a user to create
+  a specially crafted request that would execute arbitrary script code in a
+  user's browser within the trust relationship between their browser and the
+  server.
+
+cvss_v2: 4.3
+
+patched_versions: 
+  - ~> 3.0.17
+  - ~> 3.1.8
+  - ">= 3.2.8"

data/data/{bundler/audit/rails → ruby-advisory-db/gems/activesupport}/2013-0333.yml

@@ -1,6 +1,8 @@
----
+--- 
+gem: activesupport
+cve: 2013-0333
 url: http://osvdb.org/show/osvdb/89594
-title: |
+title:
   Ruby on Rails JSON Parser Crafted Payload YAML Subset Decoding Remote Code
   Execution 
 
@@ -15,6 +17,6 @@ description: |
 
 cvss_v2: 9.3
 
-patched_versions:
+patched_versions: 
   - ~> 2.3.16
   - ">= 3.0.20"

data/data/ruby-advisory-db/gems/devise/2013-0233.yml

@@ -0,0 +1,18 @@
+---
+gem: devise
+cve: 2013-0233
+url: http://osvdb.org/show/osvdb/89642
+title: Devise Database Type Conversion Crafted Request Parsing Security Bypass
+
+description: |
+  Devise contains a flaw that is triggered during when a type conversion error
+  occurs during the parsing of a malformed request. With a specially crafted
+  request, a remote attacker can bypass security restrictions.
+
+cvss_v2: 10.0
+
+patched_versions:
+  - ~> 1.5.4
+  - ~> 2.0.5
+  - ~> 2.1.3
+  - ">= 2.2.3"

data/data/ruby-advisory-db/gems/gtk2/2007-6183.yml

@@ -0,0 +1,18 @@
+---
+gem: gtk2
+cve: 2007-6183
+url: http://osvdb.org/show/osvdb/40774
+title:
+  Ruby-GNOME2 gtk/src/rbgtkmessagedialog.c Gtk::MessageDialog.new() Function
+  Format String 
+
+description: |
+  Format string vulnerability in the mdiag_initialize function in
+  gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and
+  SVN versions before 20071127, allows context-dependent attackers to execute
+  arbitrary code via format string specifiers in the message parameter.
+
+cvss_v2: 6.8
+
+patched_versions:
+  - "> 0.16.0"

data/data/{bundler/audit → ruby-advisory-db/gems}/json/2013-0269.yml

@@ -1,4 +1,6 @@
----
+--- 
+gem: json
+cve: 2013-0269
 url: http://direct.osvdb.org/show/osvdb/90074
 title: Ruby on Rails JSON Gem Arbitrary Symbol Creation Remote DoS
 
@@ -13,7 +15,7 @@ description: |
 
 cvss_v2: 9.0
 
-patched_versions:
+patched_versions: 
   - ~> 1.5.4
   - ~> 1.6.7
   - ">= 1.7.7"

data/data/ruby-advisory-db/gems/mail/2011-0739.yml

@@ -0,0 +1,19 @@
+--- 
+gem: mail
+cve: 2011-0739
+url: http://www.osvdb.org/show/osvdb/70667
+title: >
+  Mail Gem for Ruby lib/mail/network/delivery_methods/sendmail.rb Email From:
+  Address Arbitrary Shell Command Injection 
+
+description: |
+  Mail Gem for Ruby contains a flaw related to the failure to properly sanitise
+  input passed from an email from address in the 'deliver()' function in
+  'lib/mail/network/delivery_methods/sendmail.rb' before being used as a
+  command line argument. This may allow a remote attacker to inject arbitrary
+  shell commands.
+
+cvss_v2: 6.8
+
+patched_versions: 
+  - ">= 2.2.15"

data/data/ruby-advisory-db/gems/mail/2012-2139.yml

@@ -0,0 +1,11 @@
+--- 
+gem: mail
+cve: 2012-2139
+url: http://www.osvdb.org/show/osvdb/81631
+title: Mail Gem for Ruby File Delivery Method to Parameter Traversal Arbitrary File Manipulation
+description: |
+  Mail Gem for Ruby contains a flaw that allows a remote attacker to traverse outside of a restricted path. The issue is due to the program not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied via the 'to' parameter within the delivery method. This directory traversal attack would allow the attacker to modify arbitrary files.
+
+cvss_v2: 5.0
+patched_versions: 
+- ">= 2.4.4"

data/data/ruby-advisory-db/gems/mail/2012-2140.yml

@@ -0,0 +1,11 @@
+--- 
+gem: mail
+cve: 2012-2140
+url: http://www.osvdb.org/show/osvdb/81632
+title: Mail Gem for Ruby Multiple Delivery Method Remote Shell Command Executio
+description: |
+  Mail Gem for Ruby contains a flaw that occurs within the sendmail and exim delivery methods, which may allow an attacker to execute arbitrary shell commands..
+
+cvss_v2: 7.5
+patched_versions: 
+- ">= 2.4.4"

data/data/ruby-advisory-db/gems/multi_xml/2013-0175.yml

@@ -0,0 +1,14 @@
+---
+gem: multi_xml
+cve: 2013-0175
+url: http://osvdb.org/show/osvdb/89148
+title: multi_xml Gem for Ruby XML Parameter Parsing Remote Command Execution 
+
+description: |
+  The multi_xml Gem for Ruby contains a flaw that is triggered when an error
+  occurs during the parsing of the 'XML' parameter. With a crafted request
+  containing arbitrary symbol and yaml types, a remote attacker can execute
+  arbitrary commands.
+
+patched_versions:
+  - ">= 0.5.2"

data/data/ruby-advisory-db/gems/newrelic_rpm/2013-0284.yml

@@ -0,0 +1,15 @@
+---
+gem: newrelic_rpm
+cve: 2013-0284
+url: https://newrelic.com/docs/ruby/ruby-agent-security-notification
+title: Ruby on Rails newrelic_rpm Gem Discloses Sensitive Information
+
+description: |
+  A bug in the Ruby agent causes database connection information and raw SQL
+  statements to be transmitted to New Relic servers. The database connection
+  information includes the database IP address, username, and password
+
+cvss_v2:
+
+patched_versions: 
+  - ">= 3.5.3.25"

data/data/ruby-advisory-db/gems/nori/2013-0285.yml

@@ -0,0 +1,17 @@
+---
+gem: nori
+cve: 2013-0285
+url: https://github.com/savonrb/nori/commit/818f5263b1d597b603d46cbe1702cd2717259e32
+title: Ruby Gem nori Parameter Parsing Remote Code Execution
+
+description: |
+  The Ruby Gem nori has a parameter parsing error that may allow an attacker
+  to execute arbitrary code. This vulnerability has to do with type casting
+  during parsing, and is related to CVE-2013-0156.
+
+cvss_v2:
+
+patched_versions:
+  - ~> 1.0.3
+  - ~> 1.1.4
+  - ">= 2.0.2"

data/data/ruby-advisory-db/gems/omniauth-oauth2/2012-6134.yml

@@ -0,0 +1,14 @@
+---
+gem: omniauth-oauth2
+cve: 2012-6134
+url: https://github.com/intridea/omniauth-oauth2/pull/25
+title: Ruby on Rails omniauth-oauth2 Gem CSRF vulnerability
+
+description: |
+  The omniauth-oauth2 Ruby Gem contains a flaw that allows an attacker to
+  inject values into a user's session through a CSRF attack.
+
+cvss_v2: 
+
+patched_versions:
+  - ">= 1.1.1"

data/data/ruby-advisory-db/gems/rack-cache/2012-267.yml

@@ -0,0 +1,16 @@
+--- 
+gem: rack-cache
+cve: 2012-267
+url: http://osvdb.org/83077
+title: rack-cache Rubygem Sensitive HTTP Header Caching Weakness
+
+description: |
+  Rack::Cache (rack-cache) contains a flaw related to the rubygem caching
+  sensitive HTTP headers. This will result in a weakness that may make it
+  easier for an attacker to gain access to a user's session via a specially
+  crafted header.
+
+cvss_v2: 7.5
+
+patched_versions: 
+  - ">= 1.2"

data/data/{bundler/audit → ruby-advisory-db/gems}/rack/2013-0263.yml

@@ -1,4 +1,6 @@
----
+--- 
+gem: rack
+cve: 2013-0263
 url: http://osvdb.org/show/osvdb/89939
 title: |
   Rack Rack::Session::Cookie Function Timing Attack Remote Code Execution 
@@ -11,10 +13,9 @@ description: |
   latencies are sufficiently low to make the attack viable.
 
 cvss_v2: 7.6
-
-patched_versions:
-  - ~> 1.1.6
-  - ~> 1.2.8
-  - ~> 1.3.10
-  - ~> 1.4.5
-  - ">= 1.5.2"
+patched_versions: 
+- ~> 1.1.6
+- ~> 1.2.8
+- ~> 1.3.10
+- ~> 1.4.5
+- ">= 1.5.2"

data/data/ruby-advisory-db/gems/rdoc/2013-0256.yml

@@ -0,0 +1,25 @@
+---
+gem: rdoc
+cve: 2013-0256
+url: http://www.osvdb.org/show/osvdb/90004
+title: RDoc 2.3.0 through 3.12 XSS Exploit
+
+description: |
+  Doc documentation generated by rdoc 2.3.0 through rdoc 3.12 and prereleases
+  up to rdoc 4.0.0.preview2.1 are vulnerable to an XSS exploit. This exploit
+  may lead to cookie disclosure to third parties.
+  
+  The exploit exists in darkfish.js which is copied from the RDoc install
+  location to the generated documentation.
+  
+  RDoc is a static documentation generation tool. Patching the library itself
+  is insufficient to correct this exploit.
+  
+  This exploit was discovered by Evgeny Ermakov <corwmh@gmail.com>.
+
+cvss_v2: 4.3
+
+patched_versions:
+  - ~> 3.9.5
+  - ~> 3.12.1
+  - ">= 4.0"

data/data/ruby-advisory-db/spec/advisory_example.rb

@@ -0,0 +1,80 @@
+require 'spec_helper'
+require 'yaml'
+
+shared_examples_for 'Advisory' do |path|
+  advisory = YAML.load_file(path)
+
+  describe path do
+    let(:gem) { File.basename(File.dirname(path)) }
+    let(:cve) { File.basename(path).chomp('.yml') }
+
+    describe "gem" do
+      subject { advisory['gem'] }
+
+      it { should be_kind_of(String) }
+      it { should == gem }
+    end
+
+    describe "cve" do
+      subject { advisory['cve'] }
+
+      it { should be_kind_of(String) }
+      it { should == cve }
+    end
+
+    describe "url" do
+      subject { advisory['url'] }
+
+      it { should be_kind_of(String) }
+      it { should_not be_empty }
+    end
+
+    describe "title" do
+      subject { advisory['title'] }
+
+      it { should be_kind_of(String) }
+      it { should_not be_empty }
+    end
+
+    describe "description" do
+      subject { advisory['description'] }
+
+      it { should be_kind_of(String) }
+      it { should_not be_empty }
+    end
+
+    describe "cvss_v2" do
+      subject { advisory['cvss_v2'] }
+
+      it "may be nil or a Float" do
+        [NilClass, Float].should include(subject.class)
+      end
+
+      case advisory['cvss_v2']
+      when Float
+        context "when a Float" do
+          it { ((0.0)..(10.0)).should include(subject) }
+        end
+      end
+    end
+
+    describe "patched_versions" do
+      subject { advisory['patched_versions'] }
+
+      it { should be_kind_of(Array) }
+      it { should_not be_empty }
+
+      advisory['patched_versions'].each do |version|
+        describe version do
+          subject { version.split(', ') }
+
+          it "should contain valid RubyGem version requirements" do
+            lambda {
+              Gem::Requirement.new(version)
+            }.should_not raise_error(ArgumentError)
+          end
+        end
+      end
+    end
+  end
+end