dawnscanner 1.6.9 → 2.0.0.rc1

data/lib/dawn/kb/cve_2016_2098.rb

@@ -1,35 +0,0 @@
-module Dawn
-		module Kb
-			# Automatically created with rake on 2016-03-01
-			class CVE_2016_2098
-				# Include the testing skeleton for this CVE
-				# include PatternMatchCheck
-				include DependencyCheck
-				# include RubyVersionCheck
-
-				def initialize
-          message = "There is a possible remote code execution vulnerability in Action Pack. Applications that pass unverified user input to the render method in a
-controller or a view may be vulnerable to a code injection."
-          title = "Possible remote code execution vulnerability in Action Pack"
-          super({
-            :title=>title,
-            :name=> "CVE-2016-2098",
-            :cve=>"2016-2098",
-            :osvdb=>"",
-            :cvss=>"",
-            :release_date => Date.new(2016, 2, 29),
-            :cwe=>"",
-            :owasp=>"A9",
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade actionpack gem to version 3.2.22.2, 4.1.14.2, 4.2.5.2, 5.0.0 or later.",
-            :aux_links=>['https://groups.google.com/forum/message/raw?msg=rubyonrails-security/ly-IH-fxr_Q/WLoOhcMZIAAJ']
-           })
-          self.safe_dependencies = [{:name=>"actionpack", :version=>['3.2.22.2', '4.0.9999', '4.1.14.2', '4.2.5.2']}]
-          self.not_affected = {:name=>"actionpack", :version=>['5.0.x']}
-
-				end
-			end
-		end
-end

data/lib/dawn/kb/cve_2016_5697.rb

@@ -1,30 +0,0 @@
-module Dawn
-  module Kb
-    # Automatically created with rake on 2016-10-02
-    class CVE_2016_5697
-      include DependencyCheck
-
-      def initialize
-        title   = "XML signature wrapping attack"
-        message = "ruby-saml prior to version 1.3.0 is vulnerable to an XML signature wrapping attack in the specific scenario where there was a signature that referenced at the same time 2 elements (but past the scheme validator process since 1 of the element was inside the encrypted assertion)."
-        super({
-          :title=>title,
-          :name=> "CVE-2016-5697",
-          :cve=>"2016-5697",
-          :osvdb=>"",
-          :cvss=>"",
-          :release_date => Date.new(2016, 6, 24),
-          :cwe=>"",
-          :owasp=>"A9",
-          :applies=>["rails", "sinatra", "padrino"],
-          :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-          :message=>message,
-          :mitigation=>"Please upgrade ruby-saml gem to version 1.3.0 which implements 3 extra validations to mitigate this kind of attack.",
-          :aux_links=>['https://github.com/onelogin/ruby-saml/commit/a571f52171e6bfd87db59822d1d9e8c38fb3b995']
-        })
-        self.safe_dependencies = [{:name=>"ruby-saml", :version=>['1.3.0']}]
-
-      end
-    end
-  end
-end

data/lib/dawn/kb/cve_2016_6316.rb

@@ -1,33 +0,0 @@
-module Dawn
-  module Kb
-    # Automatically created with rake on 2016-10-02
-    class CVE_2016_6316
-      include DependencyCheck
-
-      def initialize
-        title   = "Possible XSS Vulnerability in Action View"
-        message = "Text declared as \"HTML safe\" when passed as an attribute value to a tag helper will not have quotes escaped which can lead to an XSS attack."
-        super({
-          :title=>title,
-          :name=> "CVE-2016-6316",
-          :cve=>"2016-6316",
-          :osvdb=>"",
-          :cvss=>"AV:N/AC:M/Au:N/C:N/I:P/A:N",
-          :release_date => Date.new(2016, 8, 11),
-          :cwe=>"",
-          :owasp=>"A9",
-          :applies=>["rails", "sinatra", "padrino"],
-          :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-          :message=>message,
-          :mitigation=>"Please upgrade actionview gem to version 3.2.22.3, 4.2.7.1, 5.0.0.1 or install latest version.",
-          :aux_links=>['https://groups.google.com/forum/#!topic/rubyonrails-security/I-VWr034ouk']
-        })
-        self.safe_dependencies = [{:name=>"actionview", :version=>['3.2.22.3', '4.2.7.1', '5.0.0.1']}]
-        self.not_affected = {:name=>"actionview", :version=>['1.x.x', '2.x.x']}
-
-        self.save_minor=true
-        self.save_major=true
-      end
-    end
-  end
-end

data/lib/dawn/kb/cve_2016_6317.rb

@@ -1,32 +0,0 @@
-module Dawn
-  module Kb
-    # Automatically created with rake on 2016-10-02
-    class CVE_2016_6317
-      include DependencyCheck
-
-      def initialize
-        title   = "Unsafe Query Generation Risk in Active Record"
-        message = "Due to the way Active Record interprets parameters in combination with the way that JSON parameters are parsed, it is possible for an attacker to issue unexpected database queries with “IS NULL” or empty where clauses. This issue does not let an attacker insert arbitrary values into an SQL query, however they can cause the query to check for NULL or eliminate a WHERE clause when most users wouldn’t expect it."
-
-        super({
-          :title=>title,
-          :name=> "CVE-2016-6317",
-          :cve=>"2016-6317",
-          :osvdb=>"",
-          :cvss=>"AV:N/AC:L/Au:N/C:N/I:P/A:N",
-          :release_date => Date.new(2016, 8, 11),
-          :cwe=>"",
-          :owasp=>"A9",
-          :applies=>["rails", "sinatra", "padrino"],
-          :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-          :message=>message,
-          :mitigation=>"Please upgrade activerecord gem to version 4.2.7.1. Please note that versions 5.0.0 or later are not affected.",
-          :aux_links=>['https://groups.google.com/forum/#!topic/rubyonrails-security/rgO20zYW33s']
-        })
-        self.safe_dependencies = [{:name=>"activerecord", :version=>['4.2.7.1']}]
-        self.not_affected = {:name=>"activerecord", :version=>['1.x.x', '2.x.x', '3.x.x', '4.0.x', '4.1.x', '5.0.x']}
-
-      end
-    end
-  end
-end

data/lib/dawn/kb/cve_2016_6582.rb

@@ -1,43 +0,0 @@
-module Dawn
-  module Kb
-    # Automatically created with rake on 2016-10-02
-    class CVE_2016_6582
-      # Include the testing skeleton for this CVE
-      # include PatternMatchCheck
-      include DependencyCheck
-      # include RubyVersionCheck
-
-      def initialize
-        title   = "Doorkeeper gem does not revoke tokens & uses wrong auth/auth method"
-        message = "Doorkeeper failed to implement OAuth 2.0 Token Revocation (RFC 7009) in the following ways:
-
-Public clients making valid, unauthenticated calls to revoke a token would not have their token revoked
-Requests were not properly authenticating the client credentials but were, instead, looking at the access token in a second location
-Because of 2, the requests were also not authorizing confidential clients’ ability to revoke a given token. It should only revoke tokens that belong to it.
-The security implication is: OAuth 2.0 clients who \"log out\" a user expect to have the corresponding access & refresh tokens revoked, preventing an attacker who may have already hijacked the session from continuing to impersonate the victim. Because of the bug described above, this is not the case. As far as OWASP is concerned, this counts as broken authentication design.
-
-MITRE has assigned CVE-2016-6582 due to the security issues raised. An attacker, thanks to 1, can replay a hijacked session after a victim logs out/revokes their token. Additionally, thanks to 2 & 3, an attacker via a compromised confidential client could \"grief\" other clients by revoking their tokens (albeit this is an exceptionally narrow attack with little value)."
-
-
-        super({
-          :title=>title,
-          :name=> "CVE-2016-6582",
-          :cve=>"",
-          :osvdb=>"",
-          :cvss=>"",
-          :release_date => Date.new(2016, 8, 18),
-          :cwe=>"",
-          :owasp=>"A9",
-          :applies=>["rails", "sinatra", "padrino"],
-          :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-          :message=>message,
-          :mitigation=>"Please upgrade doorkeeper gem to version 4.2.0 or later.",
-          :aux_links=>['http://www.openwall.com/lists/oss-security/2016/08/19/2']
-        })
-        self.safe_dependencies = [{:name=>"doorkeeper", :version=>['4.2.0']}]
-
-
-      end
-    end
-  end
-end

data/lib/dawn/kb/not_revised_code.rb

@@ -1,22 +0,0 @@
-  module Dawn
-    module Kb
-      class NotRevisedCode
-        include PatternMatchCheck
-
-
-        def initialize
-          super({:name=>"Not revised code",
-                :cvss=>"",
-                :release_date=>nil,
-                :cwe=>"",
-                :owasp=>"",
-                :applies=>["sinatra", "rails", "padrino"],
-                :kind=>Dawn::KnowledgeBase::PATTERN_MATCH_CHECK,
-                :message=>"Analyzing comments, it seems your code is waiting from some review from you. Please consider take action before putting it in production.\nThis check will analyze the source code looking for the following patterns: XXX, TO_CHECK, CHECKME, CHECK and FIXME",
-                :mitigation=>"Please review the file fixing the issue.",
-                :attack_pattern => ["XXX", "TO_CHECK", "CHECKME", "CHECK", "FIXME"]
-          })
-        end
-      end
-    end
-  end

data/lib/dawn/kb/osvdb_105971.rb

@@ -1,29 +0,0 @@
-module Dawn
-  module Kb
-    # Automatically created with rake on 2014-04-17
-    class OSVDB_105971
-      include DependencyCheck
-
-      def initialize
-        message = "sfpagent Gem for Ruby contains a flaw that is triggered as JSON[body] input is not properly sanitized when handling module names with shell metacharacters. This may allow a context-dependent attacker to execute arbitrary commands."
-
-        super({
-          :name=> "OSVDB-105971",
-          :cvss=>"AV:N/AC:L/Au:N/C:P/I:P/A:P",
-          :cve=>"2014-2888",
-          :osvdb=> "105971",
-          :release_date => Date.new(2014, 4, 16),
-          :cwe=>"",
-          :owasp=>"A9",
-          :applies=>["rack", "sinatra", "padrino", "rails"],
-          :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-          :message=>message,
-          :mitigation=>"Please upgrade sfpagent version at least to 0.4.15. As a general rule, using the latest stable version is recommended.",
-          :aux_links=>["http://seclists.org/oss-sec/2014/q2/118"]
-        })
-        self.safe_dependencies = [{:name=>"sfpagent", :version=>['0.4.15']}]
-
-      end
-    end
-  end
-end

data/lib/dawn/kb/osvdb_108530.rb

@@ -1,27 +0,0 @@
-module Dawn
-  module Kb
-    # Automatically created with rake on 2014-07-04
-    class OSVDB_108530
-      include DependencyCheck
-
-      def initialize
-        message = "kajam Gem for Ruby contains a flaw in /dataset/lib/dataset/database/postgresql.rb that is triggered when handling metacharacters. This may allow a remote attacker to execute arbitrary commands."
-        super({
-          :name=> "OSVDB-108530",
-          :cvss=>"",
-          :osvdb=>"108530",
-          :release_date => Date.new(2014, 6, 30),
-          :cwe=>"",
-          :owasp=>"A9",
-          :applies=>["rack", "sinatra", "padrino", "rails"],
-          :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-          :message=>message,
-          :mitigation=>"We are not currently aware of a solution for this vulnerability. Keep track on kajam gem updates",
-          :aux_links=>["http://www.vapid.dhs.org/advisories/kajam-1.0.3.rc2-2nd-vuln.html"]
-        })
-        self.safe_dependencies = [{:name=>"kajam", :version=>['1.0.3.rc3']}]
-
-      end
-    end
-  end
-end

data/lib/dawn/kb/osvdb_108563.rb

@@ -1,28 +0,0 @@
-module Dawn
-  module Kb
-    # Automatically created with rake on 2014-07-04
-    class OSVDB_108563
-      include DependencyCheck
-
-      def initialize
-        message = "gyazo Gem for Ruby contains a flaw in client.rb that is triggered when handling metacharacters. This may allow a remote attacker to execute arbitrary commands."
-        super({
-          :name=> "OSVDB-108563",
-          :cvss=>"",
-          :cve=>"",
-          :osvdb=>"108563",
-          :release_date => Date.new(2014, 6, 30),
-          :cwe=>"",
-          :owasp=>"A9",
-          :applies=>["rack", "sinatra", "padrino", "rails"],
-          :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-          :message=>message,
-          :mitigation=>"We are not currently aware of a solution for this vulnerability. Please check gyazo rubygem for updates and apply them as soon as possible",
-          :aux_links=>["http://www.vapid.dhs.org/advisories/gyazo-1.0.0.html"],
-        })
-        self.safe_dependencies = [{:name=>"gyazo", :version=>['1.0.1']}]
-
-      end
-    end
-  end
-end

data/lib/dawn/kb/osvdb_108569.rb

@@ -1,28 +0,0 @@
-module Dawn
-  module Kb
-    # Automatically created with rake on 2014-07-04
-    class OSVDB_108569
-      include DependencyCheck
-
-      def initialize
-        message = "backup_checksum Gem for Ruby contains a flaw in /lib/backup/cli/utility.rb that is triggered as the program displays password information in plaintext in the process list. This may allow a local attacker to gain access to password information."
-
-        super({
-          :name=> "OSVDB-108569",
-          :osvdb=> "108569",
-          :cvss=>"",
-          :release_date => Date.new(2014, 6, 30),
-          :cwe=>"",
-          :owasp=>"A9",
-          :applies=>["rack", "sinatra", "padrino", "rails"],
-          :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-          :message=>message,
-          :mitigation=>"We are not currently aware of a solution for this vulnerability. Please check backup_checksum gem for security updates.",
-          :aux_links=>["http://www.vapid.dhs.org/advisories/backup_checksum-3.0.23.html"]
-        })
-        self.safe_dependencies = [{:name=>"backup_checksum", :version=>['3.0.24']}]
-
-      end
-    end
-  end
-end

data/lib/dawn/kb/osvdb_108570.rb

@@ -1,27 +0,0 @@
-module Dawn
-  module Kb
-    # Automatically created with rake on 2014-07-04
-    class OSVDB_108570
-      include DependencyCheck
-
-      def initialize
-        message = "backup_checksum Gem for Ruby contains a flaw in /lib/backup/cli/utility.rb that is triggered when handling metacharacters. This may allow a remote attacker to execute arbitrary commands."
-        super({
-          :name=> "OSVDB-108570",
-          :cvss=>"",
-          :osvdb=> "108570",
-          :release_date => Date.new(2014, 6, 30),
-          :cwe=>"",
-          :owasp=>"A9",
-          :applies=>["rack", "sinatra", "padrino", "rails"],
-          :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-          :message=>message,
-          :mitigation=>"We are not currently aware of a solution for this vulnerability. Please check backup_checksum rubygem for upgrades",
-          :aux_links=>["http://www.vapid.dhs.org/advisories/backup_checksum-3.0.23.html"]
-        })
-        self.safe_dependencies = [{:name=>"backup_checksum", :version=>['3.0.24']}]
-
-      end
-    end
-  end
-end

data/lib/dawn/kb/osvdb_115654.rb

@@ -1,33 +0,0 @@
-module Dawn
-		module Kb
-			# Automatically created with rake on 2015-12-02
-			class OSVDB_115654
-				# Include the testing skeleton for this Security Check
-				# include PatternMatchCheck
-				include DependencyCheck
-				# include RubyVersionCheck
-
-				def initialize
-          title = "Sentry raven-ruby lib/raven/okjson.rb Exponent / Scientific Notation Value Handling Resource Consumption DoS"
-          message = "Sentry raven-ruby contains a flaw in the lib/raven/okjson.rb script that is triggered when large numeric values are stored as an exponent or in scientific notation. With a specially crafted request, an attacker can cause the software to consume excessive resources resulting in a denial of service."
-          super({
-            :title=>title,
-            :name=> "OSVDB_115654",
-            :cve=>"CVE-2014-9490",
-            :osvdb=>"115654",
-            :cvss=>"",
-            :release_date => Date.new(2015, 1, 20),
-            :cwe=>"",
-            :owasp=>"A9",
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade raven-ruby gem to version 0.12.2 or later.",
-            :aux_links=>[""]
-           })
-          self.safe_dependencies = [{:name=>"raven-ruby", :version=>['0.12.2']}]
-
-				end
-			end
-		end
-end

data/lib/dawn/kb/osvdb_116010.rb

@@ -1,30 +0,0 @@
-module Dawn
-		module Kb
-			# Automatically created with rake on 2015-12-03
-			class OSVDB_116010
-				include DependencyCheck
-
-				def initialize
-          title = "Doorkeeper Gem for Ruby access_token Disclosure CSRF"
-          message = "Cross-site request forgery (CSRF) vulnerability in doorkeeper before 1.4.1 allows remote attackers to hijack the authentication of unspecified victims for requests that read a user OAuth authorization code via unknown vectors."
-          super({
-            :title=>title,
-            :name=> "OSVDB_116010",
-            :cve=>"CVE-2014-8144",
-            :osvdb=>"116010",
-            :cvss=>"AV:N/AC:M/Au:N/C:P/I:P/A:P",
-            :release_date => Date.new(2014, 12, 31),
-            :cwe=>"",
-            :owasp=>"A9",
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade doorkeeper gem to version 1.4.1 or later.",
-            :aux_links=>[""]
-           })
-          self.safe_dependencies = [{:name=>"doorkeeper", :version=>['1.4.1']}]
-
-				end
-			end
-		end
-end

data/lib/dawn/kb/osvdb_117903.rb

@@ -1,30 +0,0 @@
-module Dawn
-		module Kb
-			# Automatically created with rake on 2015-12-02
-			class OSVDB_117903
-				include DependencyCheck
-
-				def initialize
-          title = "ruby-saml URI SAML Response Handling Remote Command Execution"
-          message = "ruby-saml contains a flaw that is triggered as the URI value of a SAML response is not properly sanitized through a prepared statement. This may allow a remote attacker to execute arbitrary shell commands on the host machine."
-           super({
-            :title=>title,
-            :name=> "OSVDB_117903",
-            :cve=>"",
-            :osvdb=>"117903",
-            :cvss=>"",
-            :release_date => Date.new(2015, 1, 7),
-            :cwe=>"",
-            :owasp=>"A9",
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade ruby-saml gem to version 0.8.2 or later.",
-            :aux_links=>["https://security.dxw.com/advisories/publicly-exploitable-command-injection-in-ruby-saml-0-7-2-library-can-root-the-host/"]
-           })
-           self.safe_dependencies = [{:name=>"ruby-saml", :version=>['0.8.2', '0.7.3']}]
-
-				end
-			end
-		end
-end