dawnscanner 1.2.99

data/lib/codesake/dawn/kb/cve_2013_1607.rb

@@ -0,0 +1,27 @@
+module Codesake
+	module Dawn
+		module Kb
+			# Automatically created with rake on 2014-02-07
+			class CVE_2013_1607
+				include DependencyCheck
+
+				def initialize
+          message = "PDFKit Gem for Ruby contains a flaw that is due to the program failing to properly validate input during the handling of parameters when generating PDF files. This may allow a remote attacker to potentially execute arbitrary code via the pdfkit generation options."
+          super({
+            :name=>"CVE-2013-1607",
+            :cvss=>"",
+            :release_date => Date.new(2013, 2, 21),
+            :cwe=>"",
+            :owasp=>"A9", 
+            :applies=>["rails", "sinatra", "padrino"],
+            :kind=>Codesake::Dawn::KnowledgeBase::DEPENDENCY_CHECK,
+            :message=>message,
+            :mitigation=>"To mitigate this vulnerability you must upgrade pdfkit gem version to 0.5.3 or higher.",
+            :aux_links=>["https://github.com/pdfkit/pdfkit/issues/164"]
+          })
+          self.safe_dependencies = [{:name=>"pdfkit", :version=>['0.5.3']}]
+				end
+			end
+		end
+	end
+end

data/lib/codesake/dawn/kb/cve_2013_1655.rb

@@ -0,0 +1,67 @@
+module Codesake
+	module Dawn
+		module Kb
+
+      class CVE_2013_1655_a
+
+				include DependencyCheck
+
+        def initialize
+          message = "CVE-2013-1655: puppet versions 2.7.21 and 3.1.1 are vulnerable"
+
+          super({
+            :name=>"CVE-2013-1655_a",
+            :kind=>Codesake::Dawn::KnowledgeBase::DEPENDENCY_CHECK,
+          })
+
+          self.safe_dependencies = [{:name=>"puppet", :version=>['2.7.21', '3.1.1']}]
+        end
+      end
+
+      class CVE_2013_1655_b
+
+        include RubyVersionCheck
+
+        def initialize
+          message = "CVE-2013-1655: puppet versions 2.7.21 and 3.1.1 are vulnerable only when running ruby 1.9.3 and 2.0.2"
+
+          super({
+            :name=>"CVE-2013-1655_b",
+            :kind=>Codesake::Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
+          })
+
+          self.safe_rubies = [
+            {:engine=>"ruby", :version=>"1.8.7", :patchlevel=>"p357"},
+            {:engine=>"ruby", :version=>"1.9.4", :patchlevel=>"p0"},
+            {:engine=>"ruby", :version=>"2.0.1", :patchlevel=>"p0"}]
+        end
+      end
+
+      class CVE_2013_1655
+
+        include ComboCheck
+
+        def initialize
+          message = "Puppet 2.7.x before 2.7.21 and 3.1.x before 3.1.1, when
+          running Ruby 1.9.3 or later, allows remote attackers to execute
+          arbitrary code via vectors related to \"serialized attributes.\""
+
+          super({
+            :name=>"CVE-2013-1655",
+            :cvss=>"AV:N/AC:L/Au:N/C:P/I:P/A:P",
+            :release_date => Date.new(2013, 3, 20),
+            :cwe=>"20",
+            :owasp=>"A9", 
+            :applies=>["rails", "sinatra", "padrino"],
+            :kind=>Codesake::Dawn::KnowledgeBase::COMBO_CHECK,
+            :message=>message,
+            :mitigation=>"Please upgrade puppet gem to a newer version",
+            :aux_links=>["https://puppetlabs.com/security/cve/cve-2013-1655/"],
+            :checks=>[CVE_2013_1655_a.new, CVE_2013_1655_b.new]
+          })
+
+        end
+      end
+    end
+  end
+end

data/lib/codesake/dawn/kb/cve_2013_1656.rb

@@ -0,0 +1,30 @@
+module Codesake
+	module Dawn
+		module Kb
+			# Automatically created with rake on 2013-05-20
+			class CVE_2013_1656
+				include DependencyCheck
+
+				def initialize
+          message = "Spree Commerce 1.0.x through 1.3.2 allow remote authenticated administrators to instantiate arbitrary Ruby objects and execute arbitrary commands via the (1) payment_method parameter to core/app/controllers/spree/admin/payment_methods_controller.rb; and the (2) promotion_action parameter to promotion_actions_controller.rb, (3) promotion_rule parameter to promotion_rules_controller.rb, and (4) calculator_type parameter to promotions_controller.rb in promo/app/controllers/spree/admin/, related to unsafe use of the constantize function."
+
+
+          super({
+            :name=>'CVE-2013-1656', 
+            :cvss=>"AV:N/AC:M/Au:N/C:N/I:P/A:N",  
+            :release_date => Date.new(2013, 3, 8),
+            :cwe=>"20", 
+            :owasp=>"A9",
+            :applies=>["rails", "sinatra", "padrino"],
+            :kind => Codesake::Dawn::KnowledgeBase::DEPENDENCY_CHECK,
+            :message => message,
+            :mitigation=>"Please upgrade Spree commerce rubygem",
+            :aux_links => ["http://spreecommerce.com/blog/multiple-security-vulnerabilities-fixed"]
+          })
+          self.safe_dependencies = [{:name=>"spree", :version=>['1.3.3']}]
+
+				end
+			end
+		end
+	end
+end

data/lib/codesake/dawn/kb/cve_2013_1756.rb

@@ -0,0 +1,28 @@
+module Codesake
+	module Dawn
+		module Kb
+			# Automatically created with rake on 2014-01-15
+			class CVE_2013_1756
+				include DependencyCheck
+
+				def initialize
+          message = "Dragonfly Gem for Ruby contains a flaw that is triggered during the parsing of a specially crafted request. This may allow a remote attacker to execute arbitrary code."
+          super({
+            :name=>'CVE-2013-1756', 
+            :cvss=>"",  
+            :release_date => Date.new(2013, 2, 19),
+            :cwe=>"20", 
+            :owasp=>"A9",
+            :applies=>["rails", "sinatra", "padrino"],
+            :kind => Codesake::Dawn::KnowledgeBase::DEPENDENCY_CHECK,
+            :message => message,
+            :mitigation=>"Please upgrade dragonfly gem to 0.9.13. However the maintainer suggests upgrading to 0.9.14 since it fix another non security related bug",
+            :aux_links => ["http://www.osvdb.com/show/osvdb/90647"]
+          })
+          self.safe_dependencies = [{:name=>"dragonfly", :version=>['0.9.13']}]
+
+				end
+			end
+		end
+	end
+end

data/lib/codesake/dawn/kb/cve_2013_1800.rb

@@ -0,0 +1,28 @@
+module Codesake
+  module Dawn
+    module Kb
+      class CVE_2013_1800  
+        include DependencyCheck
+        
+
+        def initialize
+
+          message = "The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion, a similar vulnerability to CVE-2013-0156."
+
+          super({:name=>"CVE-2013-1800", 
+                :cvss=>"AV:N/AC:L/Au:N/C:P/I:P/A:P", 
+                :release_date => Date.new(2013, 4, 9),
+                :cwe=>"264",
+                :owasp=>"A9", 
+                :applies=>["sinatra", "padrino", "rails"],
+                :kind=>Codesake::Dawn::KnowledgeBase::DEPENDENCY_CHECK,
+                :message=>message,
+                :mitigation=>"Please use crack gem version 0.3.2 or above. Correct your gemfile"
+          })
+          self.safe_dependencies = [{:name=>'crack', :version=>['0.3.2']}]
+        end
+
+      end
+    end
+  end
+end

data/lib/codesake/dawn/kb/cve_2013_1801.rb

@@ -0,0 +1,29 @@
+module Codesake
+	module Dawn
+		module Kb
+			# Automatically created with rake on 2013-05-21
+			class CVE_2013_1801
+				include DependencyCheck
+
+				def initialize
+          message = "The httparty gem 0.9.0 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for YAML type conversion, a similar vulnerability to CVE-2013-0156."
+           super({
+            :name=>"CVE-2013-1801",
+            :cvss=>"AV:N/AC:L/Au:N/C:P/I:P/A:P",
+            :release_date => Date.new(2013, 4, 9),
+            :cwe=>"264",
+            :owasp=>"A9", 
+            :applies=>["rails", "sinatra", "padrino"],
+            :kind=>Codesake::Dawn::KnowledgeBase::DEPENDENCY_CHECK,
+            :message=>message,
+            :mitigation=>"Please upgrade httparty gem to version 0.9.0 or latest version available",
+            :aux_links=>["https://support.cloud.engineyard.com/entries/22915701-january-14-2013-security-vulnerabilities-httparty-extlib-crack-nori-update-these-gems-immediately"]
+          })
+
+          self.safe_dependencies = [{:name=>"httparty", :version=>['0.9.0']}]
+
+				end
+			end
+		end
+	end
+end

data/lib/codesake/dawn/kb/cve_2013_1802.rb

@@ -0,0 +1,29 @@
+module Codesake
+	module Dawn
+		module Kb
+			# Automatically created with rake on 2013-05-21
+			class CVE_2013_1802
+				include DependencyCheck
+
+				def initialize
+          message= "The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion, a similar vulnerability to CVE-2013-0156."
+           super({
+            :name=>"CVE-2013-1802",
+            :cvss=>"AV:N/AC:L/Au:N/C:P/I:P/A:P",
+            :release_date => Date.new(2013, 4, 9),
+            :cwe=>"264",
+            :owasp=>"A9", 
+            :applies=>["rails", "sinatra", "padrino"],
+            :kind=>Codesake::Dawn::KnowledgeBase::DEPENDENCY_CHECK,
+            :message=>message,
+            :mitigation=>"Please upgrade extlib gem to version 0.9.16 or latest version available",
+            :aux_links=>["https://support.cloud.engineyard.com/entries/22915701-january-14-2013-security-vulnerabilities-httparty-extlib-crack-nori-update-these-gems-immediately"]
+          })
+
+          self.safe_dependencies = [{:name=>"extlib", :version=>['0.9.16']}]
+
+				end
+			end
+		end
+	end
+end

data/lib/codesake/dawn/kb/cve_2013_1812.rb

@@ -0,0 +1,29 @@
+module Codesake
+	module Dawn
+		module Kb
+			# Automatically created with rake on 2013-12-17
+			class CVE_2013_1812
+				include DependencyCheck
+
+				def initialize
+          message = "The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack."
+
+           super({
+            :name=>'CVE-2013-1812', 
+            :cvss=>"AV:N/AC:M/Au:N/C:N/I:N/A:P",  
+            :release_date => Date.new(2013, 12, 12),
+            :cwe=>"399", 
+            :owasp=>"A9",
+            :applies=>["rails", "padrino", "sinatra"],
+            :kind => Codesake::Dawn::KnowledgeBase::DEPENDENCY_CHECK,
+            :message => message,
+            :mitigation=>"Please upgrade ruby-openid rubygem",
+            :aux_links => ["http://www.openwall.com/lists/oss-security/2013/03/03/8"]
+          })
+          self.safe_dependencies = [{:name=>"ruby-openid", :version=>['2.2.2']}]
+
+				end
+			end
+		end
+	end
+end

data/lib/codesake/dawn/kb/cve_2013_1821.rb

@@ -0,0 +1,30 @@
+module Codesake
+	module Dawn
+		module Kb
+			# Automatically created with rake on 2013-05-22
+			class CVE_2013_1821
+				include RubyVersionCheck
+
+				def initialize
+          message="lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 and 2.0.0-p0 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an XML Entity Expansion (XEE) attack."
+          super({
+            :name=>"CVE-2013-1821",
+            :cvss=>"AV:N/AC:L/Au:N/C:N/I:N/A:P",
+            :release_date => Date.new(2013, 4, 9),
+            :cwe=>"20",
+            :owasp=>"A9", 
+            :applies=>["rails", "sinatra", "padrino"],
+            :kind=>Codesake::Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
+            :message=>message,
+            :mitigation=>"Please upgrade ruby interpreter to 1.9.3-p392 or 2.0.0-p195 or latest version available",
+            :aux_links=>["http://www.ruby-lang.org/en/news/2013/02/22/rexml-dos-2013-02-22/"]
+          })
+
+          self.safe_rubies = [{:engine=>"ruby", :version=>"1.9.3", :patchlevel=>"p392"}, {:engine=>"ruby", :version=>"2.0.0", :patchlevel=>"p195"}]
+
+
+				end
+			end
+		end
+	end
+end

data/lib/codesake/dawn/kb/cve_2013_1854.rb

@@ -0,0 +1,28 @@
+module Codesake
+	module Dawn
+		module Kb
+			# Automatically created with rake on 2013-05-16
+			class CVE_2013_1854
+				include DependencyCheck
+
+				def initialize
+          message = "The Active Record component in Ruby on Rails 2.3.x before 2.3.18, 3.1.x before 3.1.12, and 3.2.x before 3.2.13 processes certain queries by converting hash keys to symbols, which allows remote attackers to cause a denial of service via crafted input to a where method."
+          
+          super({
+            :name=>'CVE-2013-1854', 
+            :cvss=>"AV:N/AC:L/Au:N/C:N/I:N/A:P",  
+            :release_date => Date.new(2013, 3, 19),
+            :cwe=>"20", 
+            :owasp=>"A9",
+            :applies=>["rails"],
+            :kind => Codesake::Dawn::KnowledgeBase::DEPENDENCY_CHECK,
+            :message => message,
+            :mitigation=>"Please upgrade rails version at least to 2.3.18, 3.1.12 and 3.2.13. As a general rule, using the latest stable rails version is recommended.",
+            :aux_links => ["https://groups.google.com/group/ruby-security-ann/msg/34e0d780b04308de?dmode=source&output=gplain"]
+          })
+          self.safe_dependencies = [{:name=>"rails", :version=>['2.3.18', '3.2.13', '3.1.12']}]
+				end
+			end
+		end
+	end
+end

data/lib/codesake/dawn/kb/cve_2013_1855.rb

@@ -0,0 +1,27 @@
+module Codesake
+  module Dawn
+    module Kb
+      class CVE_2013_1855 
+				include DependencyCheck
+
+        def initialize
+          message = "The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle \\n (newline) characters, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via crafted Cascading Style Sheets (CSS) token sequences."
+
+          super({
+            :name=>'CVE-2013-1855', 
+            :cvss=>"AV:N/AC:M/Au:N/C:N/I:P/A:N",  
+            :release_date => Date.new(2013, 3, 19),
+            :cwe=>"79", 
+            :owasp=>"A3",
+            :applies=>["rails"],
+            :kind => Codesake::Dawn::KnowledgeBase::DEPENDENCY_CHECK,
+            :message => message,
+            :mitigation=>"Please upgrade rails version at least to 2.3.18, 3.0.8, 3.1.12 and 3.2.13. As a general rule, using the latest stable rails version is recommended.",
+            :aux_links => ["https://groups.google.com/d/msg/rubyonrails-security/4_QHo4BqnN8/_RrdfKk12I4J"]
+          })
+          self.safe_dependencies = [{:name=>"rails", :version=>['2.3.18', '3.0.8', '3.2.13', '3.1.12']}]
+        end
+      end
+    end
+  end
+end

data/lib/codesake/dawn/kb/cve_2013_1856.rb

@@ -0,0 +1,28 @@
+module Codesake
+	module Dawn
+		module Kb
+			# Automatically created with rake on 2013-05-16
+			class CVE_2013_1856
+				include DependencyCheck
+
+				def initialize
+          message= "The ActiveSupport::XmlMini_JDOM backend in lib/active_support/xml_mini/jdom.rb in the Active Support component in Ruby on Rails 3.0.x and 3.1.x before 3.1.12 and 3.2.x before 3.2.13, when JRuby is used, does not properly restrict the capabilities of the XML parser, which allows remote attackers to read arbitrary files or cause a denial of service (resource consumption) via vectors involving (1) an external DTD or (2) an external entity declaration in conjunction with an entity reference."
+         super({
+            :name=>'CVE-2013-1856', 
+            :cvss=>"AV:N/AC:M/Au:N/C:P/I:N/A:P",  
+            :release_date => Date.new(2013, 3, 19),
+            :cwe=>"20", 
+            :owasp=>"A9",
+            :applies=>["rails"],
+            :kind => Codesake::Dawn::KnowledgeBase::DEPENDENCY_CHECK,
+            :message => message,
+            :mitigation=>"Please upgrade rails version at least to 3.1.12 and 3.2.13. As a general rule, using the latest stable rails version is recommended.",
+            :aux_links => ["https://groups.google.com/group/rubyonrails-security/msg/6c2482d4ed1545e6?dmode=source&output=gplain"]
+          })
+          self.safe_dependencies = [{:name=>"rails", :version=>['3.2.13', '3.1.12']}]
+ 
+				end
+			end
+		end
+	end
+end

data/lib/codesake/dawn/kb/cve_2013_1857.rb

@@ -0,0 +1,29 @@
+module Codesake
+	module Dawn
+		module Kb
+			# Automatically created with rake on 2013-05-02
+			class CVE_2013_1857
+				include DependencyCheck
+
+        def initialize
+          message = "The sanitize helper in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before 2.3.18, 3.0.x and 3.1.x before 3.1.12, and 3.2.x before 3.2.13 does not properly handle encoded : (colon) characters in URLs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted scheme name, as demonstrated by including a : sequence."
+
+          super({
+            :name=>'CVE-2013-1857', 
+            :cvss=>"AV:N/AC:M/Au:N/C:N/I:P/A:N", 
+            :release_date => Date.new(2013, 3, 19),
+            :cwe=>"79", 
+            :owasp=>"A3",
+            :applies=>["rails"],
+            :kind => Codesake::Dawn::KnowledgeBase::DEPENDENCY_CHECK,
+            :message => message,
+            :mitigation=>"Please upgrade rails version at least to 2.3.18, 3.0.8, 3.1.10 and 3.2.11. As a general rule, using the latest stable rails version is recommended.",
+            :aux_links => [ "https://groups.google.com/d/msg/rubyonrails-security/zAAU7vGTPvI/1vZDWXqBuXgJ" ]
+          })
+          self.safe_dependencies = [{:name=>"rails", :version=>['2.3.18', '3.0.8', '3.2.13', '3.1.12']}]
+
+        end
+      end
+    end
+  end
+end

data/lib/codesake/dawn/kb/cve_2013_1875.rb

@@ -0,0 +1,29 @@
+module Codesake
+	module Dawn
+		module Kb
+			# Automatically created with rake on 2013-05-17
+			class CVE_2013_1875
+				include DependencyCheck
+
+				def initialize
+          message="command_wrap.rb in the command_wrap Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL or filename."
+         super({
+            :name=>"CVE-2013-1875",
+            :cvss=>"AV:N/AC:L/Au:N/C:P/I:P/A:P",
+            :release_date => Date.new(2013, 3, 20),
+            :cwe=>"94",
+            :owasp=>"A9", 
+            :applies=>["rails", "sinatra", "padrino"],
+            :kind=>Codesake::Dawn::KnowledgeBase::DEPENDENCY_CHECK,
+            :message=>message,
+            :mitigation=>"Please upgrade command_wrap gem to a newer version",
+            :aux_links=>["http://seclists.org/fulldisclosure/2013/Mar/175"]
+          })
+
+          self.safe_dependencies = [{:name=>"fastreader", :version=>['1.0.9']}]
+ 
+				end
+			end
+		end
+	end
+end