dawnscanner 1.6.9 → 2.0.0.rc1

data/lib/dawn/kb/cve_2014_1233.rb

@@ -1,27 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-02-05
-			class CVE_2014_1233
-				include DependencyCheck
-
-				def initialize
-          message = "The paratrooper-pingdom gem 1.0.0 for Ruby allows local users to obtain the App-Key, username, and password values by listing the curl process."
-
-          super({
-            :name=>"CVE-2014-1233",
-            :cvss=>"AV:L/AC:L/Au:N/C:P/I:N/A:N",
-            :release_date => Date.new(2014, 01, 10),
-            :cwe=>"200",
-            :owasp=>"A9", 
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade paratrooper-pingdom version up to version 1.0.0.",
-            :aux_links=>["http://www.vapid.dhs.org/advisories/paratrooper-api-key-pingdom.html"]
-          })
-
-          self.safe_dependencies = [{:name=>"paratrooper-pingdom", :version=>['1.0.1']}]
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2014_1234.rb

@@ -1,26 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-02-05
-			class CVE_2014_1234
-				include DependencyCheck
-
-				def initialize
-          message = "The paratrooper-newrelic gem 1.0.1 for Ruby allows local users to obtain the X-Api-Key value by listing the curl process."
-          super({
-            :name=>"CVE-2014-1234",
-            :cvss=>"AV:L/AC:L/Au:N/C:P/I:N/A:N",
-            :release_date => Date.new(2014, 01, 10),
-            :cwe=>"200",
-            :owasp=>"A9", 
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade paratrooper-newrelic version up to version 1.0.1.",
-            :aux_links=>["http://www.vapid.dhs.org/advisories/paratrooper-newrelic-api.html"]
-          })
-
-          self.safe_dependencies = [{:name=>"paratrooper-newrelic", :version=>['1.0.2']}]
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2014_2322.rb

@@ -1,28 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-03-14
-			class CVE_2014_2322
-				# Include the testing skeleton for this CVE
-				include DependencyCheck
-
-				def initialize
-          message = "Arabic Prawn Gem for Ruby contains a flaw in the ib/string_utf_support.rb file. The issue is due to the program failing to sanitize user input. This may allow a remote attacker to inject arbitrary commands."
-
-           super({
-            :name=>"CVE-2014-2322",
-            :cvss=>"AV:N/AC:L/Au:N/C:P/I:P/A:P",
-            :release_date => Date.new(2014, 3, 10),
-            :cwe=>"",
-            :owasp=>"A9",
-            :applies=>["sinatra", "padrino", "rails"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"At March, 14 2014 a fixed Arabic-Prawn release is not available. Please sanitize your input before passing it to this gem and upgrade to higher versions as soon as possible",
-            :aux_links=>["http://packetstormsecurity.com/files/125679/Ruby-Gem-Arabic-Prawn-0.0.1-Command-Injection.html"]
-           })
-
-           self.safe_dependencies = [{:name=>"Arabic-Prawn", :version=>['0.0.2']}]
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2014_2525.rb

@@ -1,59 +0,0 @@
-	module Dawn
-		module Kb
-      class CVE_2014_2525_a
-        include BasicCheck
-
-        def initialize
-          message = "When relying on system wide libyaml, this must be > 0.1.5"
-          super({
-            :name=>"CVE-2014-2525-a",
-            :kind=>Dawn::KnowledgeBase::CUSTOM_CHECK,
-          })
-        end
-        def vuln?
-          require 'yaml'
-          lyv = Psych.libyaml_version.join(".")
-          c = Dawn::Kb::VersionCheck.new
-          return c.is_vulnerable_version?('0.1.6', lyv)
-        end
-      end
-      class CVE_2014_2525_b
-        include DependencyCheck
-
-        def initialize
-          message = "When non relying on system wide libyaml, psych gem must be > 2.0.5"
-          super({
-            :name=>"CVE-2014-2525-b",
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-          })
-          self.safe_dependencies = [{:name=>"psych", :version=>['2.0.5']}]
-        end
-
-      end
-
-			# Automatically created with rake on 2014-03-31
-			class CVE_2014_2525
-				include ComboCheck
-
-				def initialize
-          message = ""
-
-          super({
-            :name=>"CVE-2014-2525",
-            :cvss=>"",
-            :release_date => Date.new(2014, 3, 28),
-            :cwe=>"",
-            :owasp=>"A9",
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::COMBO_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade your system libyaml or upgrade psych gem to version 2.0.5 or higher that is linked with a safe libyaml version.",
-            :aux_links=>["https://www.ruby-lang.org/en/news/2014/03/29/heap-overflow-in-yaml-uri-escape-parsing-cve-2014-2525"],
-            :severity=>:high,
-            :prority=>:high,
-            :checks=>[CVE_2014_2525_a.new, CVE_2014_2525_b.new]
-          })
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2014_2538.rb

@@ -1,26 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-03-23
-			class CVE_2014_2538
-				include DependencyCheck
-
-				def initialize
-          message = "rack-ssl Gem for Ruby contains a flaw that allows a reflected cross-site scripting (XSS) attack. This flaw exists because the program does not validate input passed via error messages before returning it to users. This may allow a context-dependent attacker to create a specially crafted request that would execute arbitrary script code in a user's browser session within the trust relationship between their browser and the server."
-           super({
-            :name=>"CVE-2014-2538",
-            :cvss=>"AV:N/AC:M/Au:N/C:N/I:P/A:N",
-            :release_date => Date.new(2014, 3, 25),
-            :cwe=>"79",
-            :owasp=>"A3",
-            :applies=>["rails"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"A new version for rack-ssl version it has been released. Pleas upgrade at least to version 1.3.4 or higher.",
-            :aux_links=>["http://seclists.org/oss-sec/2014/q1/594"]
-           })
-
-           self.safe_dependencies = [{:name=>"rack-ssl", :version=>['1.3.4']}]
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2014_3482.rb

@@ -1,28 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-07-04
-			class CVE_2014_3482
-				include DependencyCheck
-
-				def initialize
-          message = "Ruby on Rails contains a flaw that may allow carrying out an SQL injection attack. The issue is due to the PostgreSQL adapter for Active Record not properly sanitizing user-supplied input when quoting bitstrings. This may allow a remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data."
-           super({
-            :name=> "CVE-2014-3482",
-            :cve=>"CVE-2014-3482",
-            :osvdb=>"108664",
-            :cvss=>"AV:N/AC:L/Au:N/C:P/I:P/A:P",
-            :release_date => Date.new(2014, 7, 2),
-            :cwe=>"",
-            :owasp=>"A1",
-            :applies=>["rails"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade rails version at least to 3.2.19. As a general rule, using the latest stable version is recommended.",
-            :aux_links=>["http://weblog.rubyonrails.org/2014/7/2/Rails_3_2_19_4_0_7_and_4_1_3_have_been_released/"]
-           })
-           self.safe_dependencies = [{:name=>"rails", :version=>['3.2.19']}]
-
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2014_3483.rb

@@ -1,28 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-07-07
-			class CVE_2014_3483
-				include DependencyCheck
-
-				def initialize
-          message = "Ruby on Rails contains a flaw that may allow carrying out an SQL injection attack. The issue is due to the PostgreSQL adapter for Active Record not properly sanitizing user-supplied input when quoting ranges. This may allow a remote attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data."
-           super({
-            :name=>"CVE-2014-3483",
-            :cve=>"2014-3483",
-            :osvdb=>"108665",
-            :cvss=>"AV:N/AC:L/Au:N/C:P/I:P/A:P",
-            :release_date => Date.new(2014, 7, 2),
-            :cwe=>"",
-            :owasp=>"A1",
-            :applies=>["rails"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade rails at least to version 4.0.7 or 4.1.3. As a general rule, using the latest stable rails version is recommended.",
-            :aux_links=>["http://weblog.rubyonrails.org/2014/7/2/Rails_3_2_19_4_0_7_and_4_1_3_have_been_released/"]
-           })
-           self.save_major=true
-           self.safe_dependencies = [{:name=>"rails", :version=>['4.0.7', '4.1.3']}]
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2014_3916.rb

@@ -1,29 +0,0 @@
-module Dawn
-		module Kb
-			# Automatically created with rake on 2015-08-03
-			class CVE_2014_3916
-				include RubyVersionCheck
-
-				def initialize
-          message = "The str_buf_cat function in string.c in Ruby 1.9.3, 2.0.0, and 2.1 allows context-dependent attackers to cause a denial of service (segmentation fault and crash) via a long string."
-          super({
-          :name=>"CVE-2014-3916",
-          :cvss=>"AV:N/AC:L/Au:N/C:N/I:N/A:P",
-          :release_date => Date.new(2014, 11, 16),
-          :cwe=>"19",
-          :owasp=>"A9",
-          :applies=>["rails", "sinatra", "padrino"],
-          :kind=>Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
-          :message=>message,
-          :mitigation=>"Please upgrade ruby interpreter to 2.2.x or later.",
-          :aux_links=>["https://bugs.ruby-lang.org/issues/9709", "http://www.securityfocus.com/bid/67705"]
-        })
-
-        self.safe_rubies = [{:engine=>"ruby", :version=>"1.9.99", :patchlevel=>"p999"},
-                            {:engine=>"ruby", :version=>"2.0.99", :patchlevel=>"p999"},
-                            {:engine=>"ruby", :version=>"2.1.99", :patchlevel=>"p999"}]
-
-				end
-			end
-		end
-end

data/lib/dawn/kb/cve_2014_4975.rb

@@ -1,28 +0,0 @@
-module Dawn
-		module Kb
-			# Automatically created with rake on 2015-08-03
-			class CVE_2014_4975
-				include RubyVersionCheck
-
-				def initialize
-          message = "Off-by-one error in the encodes function in pack.c in Ruby 1.9.3 and earlier, and 2.x through 2.1.2, when using certain format string specifiers, allows context-dependent attackers to cause a denial of service (segmentation fault) via vectors that trigger a stack-based buffer overflow."
-          super({
-            :name=>"CVE-2014-4975",
-            :cvss=>"AV:N/AC:L/Au:N/C:P/I:N/A:N",
-            :release_date => Date.new(2014, 11, 15),
-            :cwe=>"119",
-            :owasp=>"A9",
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade ruby interpreter to 2.1.3 or later. Please note that latest 2.2.x version is suggested.",
-            :aux_links=>["http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=46778", "https://bugs.ruby-lang.org/issues/10019"]
-          })
-
-          self.safe_rubies = [{:engine=>"ruby", :version=>"1.9.99", :patchlevel=>"p999"},
-                              {:engine=>"ruby", :version=>"2.0.99", :patchlevel=>"p999"},
-                              {:engine=>"ruby", :version=>"2.1.2", :patchlevel=>"p999"}]
-        end
-      end
-    end
-end

data/lib/dawn/kb/cve_2014_7818.rb

@@ -1,27 +0,0 @@
-module Dawn
-		module Kb
-			# Automatically created with rake on 2015-09-02
-			class CVE_2014_7818
-				include DependencyCheck
-
-				def initialize
-          message = "Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.20, 4.0.x before 4.0.11, 4.1.x before 4.1.7, and 4.2.x before 4.2.0.beta3, when serve_static_assets is enabled, allows remote attackers to determine the existence of files outside the application root via a /..%2F sequence."
-           super({
-            :name=>"CVE-2014-7818",
-            :cvss=>"AV:N/AC:M/Au:N/C:P/I:N/A:N",
-            :release_date => Date.new(2014, 11, 8),
-            :cwe=>"22",
-            :owasp=>"A9",
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade rails gem to latest version or at least 3.2.20, 4.0.11, 4.1.7 or 4.2.0.beta3. If unsure upgrade to the latest available version.",
-            :aux_links=>["https://groups.google.com/forum/message/raw?msg=rubyonrails-security/dCp7duBiQgo/v_R_8PFs5IwJ"]
-           })
-
-           self.safe_dependencies = [{:name=>"rails", :version=>['3.2.20', '4.0.11', '4.1.7', '4.2.0.beta3']}]
-          self.save_major = true
-				end
-			end
-		end
-end

data/lib/dawn/kb/cve_2014_7819.rb

@@ -1,31 +0,0 @@
-module Dawn
-		module Kb
-			# Automatically created with rake on 2015-08-31
-			class CVE_2014_7819
-				include DependencyCheck
-
-				def initialize
-          message = "Multiple directory traversal vulnerabilities in server.rb in Sprockets before 2.0.5, 2.1.x before 2.1.4, 2.2.x before 2.2.3, 2.3.x before 2.3.3, 2.4.x before 2.4.6, 2.5.x before 2.5.1, 2.6.x and 2.7.x before 2.7.1, 2.8.x before 2.8.3, 2.9.x before 2.9.4, 2.10.x before 2.10.2, 2.11.x before 2.11.3, 2.12.x before 2.12.3, and 3.x before 3.0.0.beta.3, as distributed with Ruby on Rails 3.x and 4.x, allow remote attackers to determine the existence of files outside the application root via a ../ (dot dot slash) sequence with (1) double slashes or (2) URL encoding."
-
-           super({
-            :name=>"CVE-2014-7819",
-            :cvss=>"AV:N/AC:L/Au:N/C:P/I:N/A:N)",
-            :release_date => Date.new(2014, 11, 8),
-            :cwe=>"22",
-            :owasp=>"A9",
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade rails gem to latest version or at least 3.2.18 or 4.1.8. If you're using sprockets standalone, please upgrade it to the latest version.",
-            :aux_links=>["https://groups.google.com/forum/message/raw?msg=rubyonrails-security/wQBeGXqGs3E/JqUMB6fhh3gJ"]
-           })
-
-           self.save_major = true
-           self.save_minor = true
-           self.safe_dependencies = [{:name=>"rails", :version=>['3.2.18', '4.1.8']},
-                                     {:name=>"sprockets", :version=>['2.0.6', '2.1.4', '2.2.3', '2.3.3', '2.4.6', '2.5.1', '2.6.1', '2.7.1', '2.8.3', '2.9.4', '2.10.2', '2.11.3', '2.12.3', '3.0.0.beta3']}]
-
-				end
-			end
-		end
-end

data/lib/dawn/kb/cve_2014_7829.rb

@@ -1,30 +0,0 @@
-module Dawn
-		module Kb
-			# Automatically created with rake on 2015-07-31
-			class CVE_2014_7829
-				include DependencyCheck
-
-				def initialize
-          message = "Directory traversal vulnerability in actionpack/lib/action_dispatch/middleware/static.rb in Action Pack in Ruby on Rails 3.x before 3.2.21, 4.0.x before 4.0.12, 4.1.x before 4.1.8, and 4.2.x before 4.2.0.beta4, when serve_static_assets is enabled, allows remote attackers to determine the existence of files outside the application root via vectors involving a \ (backslash) character, a similar issue to CVE-2014-7818."
-
-          super({
-            :name=>"CVE-2014-7829",
-            :cvss=>"AV:N/AC:L/Au:N/C:P/I:N/A:N",
-            :release_date => Date.new(2014, 11, 18),
-            :cwe=>"22",
-            :owasp=>"A9",
-            :applies=>["rails"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade rails gem to latest version or at least 3.2.21, 4.0.12, 4.1.8 or 4.2.0.beta4.",
-            :aux_links=>["https://groups.google.com/forum/message/raw?msg=rubyonrails-security/rMTQy4oRCGk/loS_CRS8mNEJ"]
-           })
-
-          self.safe_dependencies = [{:name=>"rails", :version=>['3.2.21', '4.0.12', '4.1.8', '4.2.0.beta4']}]
-          self.save_major = true
-          self.save_minor = false
-
-				end
-			end
-		end
-end

data/lib/dawn/kb/cve_2014_8090.rb

@@ -1,30 +0,0 @@
-module Dawn
-  module Kb
-    # Automatically created with rake on 2015-07-31
-    class CVE_2014_8090
-      include RubyVersionCheck
-
-      def initialize
-        message = "The REXML parser in Ruby 1.9.x before 1.9.3 patchlevel 551, 2.0.x before 2.0.0 patchlevel 598, and 2.1.x before 2.1.5 allows remote attackers to cause a denial of service (CPU and memory consumption) a crafted XML document containing an empty string in an entity that is used in a large number of nested entity references, aka an XML Entity Expansion (XEE) attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-1821 and CVE-2014-8080."
-
-        super({
-          :name=>"CVE-2014-8090",
-          :cvss=>"AV:N/AC:L/Au:N/C:N/I:N/A:P",
-          :release_date => Date.new(2014, 11, 21),
-          :cwe=>"611",
-          :owasp=>"A9",
-          :applies=>["rails", "sinatra", "padrino"],
-          :kind=>Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
-          :message=>message,
-          :mitigation=>"Please upgrade ruby interpreter to 1.9.3-p551 or 2.0.0-p598 or 2.1.5. Please note that latest 2.2.x version is suggested.",
-          :aux_links=>["https://www.ruby-lang.org/en/news/2014/11/13/rexml-dos-cve-2014-8090/"]
-        })
-
-        self.safe_rubies = [{:engine=>"ruby", :version=>"1.9.3", :patchlevel=>"p551"},
-                            {:engine=>"ruby", :version=>"2.0.0", :patchlevel=>"p598"},
-                            {:engine=>"ruby", :version=>"2.1.5", :patchlevel=>"p0"}]
-
-      end
-    end
-  end
-end

data/lib/dawn/kb/cve_2014_9490.rb

@@ -1,29 +0,0 @@
-module Dawn
-		module Kb
-			# Automatically created with rake on 2015-07-30
-			class CVE_2014_9490
-				include DependencyCheck
-
-				def initialize
-          message = "The numtok function in lib/raven/okjson.rb in the raven-ruby gem before 0.12.2 for Ruby allows remote attackers to cause a denial of service via a large exponent value in a scientific number."
-
-           super({
-            :name=>"CVE-2014-9490",
-            :cvss=>"AV:N/AC:L/Au:N/C:N/I:N/A:P",
-            :release_date => Date.new(2015, 1, 20),
-            :cwe=>"399",
-            :owasp=>"A9",
-            :osvdb=>"115654",
-            :applies=>["sinatra", "padrino", "rails"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade raven-ruby gem to the latest version",
-            :aux_links=>["https://github.com/getsentry/raven-ruby/commit/477ee93a3f735be33bc1e726820654cdf6e22d8f", "http://seclists.org/oss-sec/2015/q1/26"]
-           })
-
-           self.safe_dependencies = [{:name=>"raven-ruby", :version=>['0.12.2']}]
-
-				end
-			end
-		end
-end