dawnscanner 1.6.9 → 2.0.0.rc1

data/lib/dawn/kb/cve_2007_5380.rb

@@ -1,29 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-01-09
-			class CVE_2007_5380
-				include DependencyCheck
-
-				def initialize
-          message = "Session fixation vulnerability in Rails before 1.2.4, as used for Ruby on Rails, allows remote attackers to hijack web sessions via unspecified vectors related to \"URL-based sessions.\""
-           super({
-            :name=>"CVE-2007-5380",
-            :cvss=>"AV:N/AC:M/Au:N/C:P/I:P/A:P",
-            :release_date => Date.new(2007, 10, 19),
-            :cwe=>"",
-            :severity=>:high,
-            :priority=>:high,
-            :owasp=>"A9", 
-            :applies=>["rails"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade rails version at least to 1.2.4 or higher. As a general rule, using the latest stable rails version is recommended.",
-            :aux_links=>["http://weblog.rubyonrails.org/2007/10/5/rails-1-2-4-maintenance-release"]
-          })
-
-          self.safe_dependencies = [{:name=>"rails", :version=>['1.2.4']}]
-
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2007_5770.rb

@@ -1,30 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-01-09
-			class CVE_2007_5770
-				include RubyVersionCheck
-
-				def initialize
-          message = "The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in Ruby 1.8.5 and 1.8.6 do not verify that the commonName (CN) field in a server certificate matches the domain name in a request sent over SSL, which makes it easier for remote attackers to intercept SSL transmissions via a man-in-the-middle attack or spoofed web site, different components than CVE-2007-5162."
-          super({
-            :name=>"CVE-2007-5770",
-            :cvss=>"AV:N/AC:L/Au:N/C:N/I:P/A:N",
-            :release_date => Date.new(2007, 11, 14),
-            :cwe=>"22",
-            :owasp=>"A9", 
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
-            :message=>message,
-            :mitigation=>"Upgrade your ruby interpreter",
-            :aux_links=>["http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=rev&revision=13656"]
-          })
-
-          self.safe_rubies = [
-            {:engine=>"ruby", :version=>"1.8.6", :patchlevel=>"p999"}, 
-            {:engine=>"ruby", :version=>"1.8.5", :patchlevel=>"p999"}
-          ]
-
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2007_6077.rb

@@ -1,31 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-01-09
-			class CVE_2007_6077
-				include DependencyCheck
-
-				def initialize
-          message = "The session fixation protection mechanism in cgi_process.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookie_only attribute from the DEFAULT_SESSION_OPTIONS constant, which effectively causes cookie_only to be applied only to the first instantiation of CgiRequest, which allows remote attackers to conduct session fixation attacks. NOTE: this is due to an incomplete fix for CVE-2007-5380. It has been reviewed in 2012 and it affects also 2.3.x, 3.0.x and 3.1.x."
-
-          super({
-            :name=>"CVE-2007-6077",
-            :cvss=>"AV:N/AC:M/Au:N/C:P/I:P/A:P",
-            :release_date => Date.new(2007, 11, 21),
-            :cwe=>"362",
-            :severity=>:high,
-            :priority=>:high,
-            :owasp=>"A9", 
-            :applies=>["rails"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade rails version at least to 1.2.7, 2.1.3, 2.3.13, 3.0.15, 3.1.7, 3.2.7 or higher. As a general rule, using the latest stable rails version is recommended.",
-            :aux_links=>["http://weblog.rubyonrails.org/2007/11/24/ruby-on-rails-1-2-6-security-and-maintenance-release"]
-          })
-
-
-          self.safe_dependencies = [{:name=>"rails", :version=>['1.2.7', '2.1.3', '2.3.13', '3.0.15', '3.1.7', '3.2.7', '2.0.999', '1.9.999', '1.2.999', '1.1.999', '0.999.999']}]
-
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2007_6612.rb

@@ -1,30 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-01-09
-			class CVE_2007_6612
-				include DependencyCheck
-
-				def initialize
-          message = "Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (\".%252e\")."
-
-          super({
-            :name=>"CVE-2007-6612",
-            :cvss=>"AV:N/AC:L/Au:N/C:P/I:P/A:N",
-            :release_date => Date.new(2008, 3, 1),
-            :cwe=>"",
-            :severity=>:high,
-            :priority=>:high,
-            :owasp=>"A9", 
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::DEPENDENCY_CHECK,
-            :message=>message,
-            :mitigation=>"Please upgrade mongrel to version 1.1.3 or above",
-            :aux_links=>["http://www.securityfocus.com/bid/27133"]
-          })
-
-          self.safe_dependencies = [{:name=>"mongrel", :version=>['1.1.3']}]
-
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2008_1145.rb

@@ -1,38 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-01-09
-			class CVE_2008_1145
-				include RubyVersionCheck
-
-				def initialize
-          message = "Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash (\) path separators or case-insensitive file names, allows remote attackers to access arbitrary files via (1) \"..%5c\" (encoded backslash) sequences or (2) filenames that match patterns in the :NondisclosureName option."
-          super({
-            :name=>"CVE-2008-1145",
-            :cvss=>"AV:N/AC:L/Au:N/C:P/I:N/A:N",
-            :release_date => Date.new(2008, 3, 4),
-            :cwe=>"22",
-            :owasp=>"A9", 
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
-            :message=>message,
-            :mitigation=>"Upgrade your ruby interpreter",
-            :aux_links=>["http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/"]
-          })
-
-          self.safe_rubies = [
-            {:engine=>"ruby", :version=>"1.9.0", :patchlevel=>"p2"}, 
-            {:engine=>"ruby", :version=>"1.8.7", :patchlevel=>"p22"}, 
-            {:engine=>"ruby", :version=>"1.8.6", :patchlevel=>"p114"}, 
-            {:engine=>"ruby", :version=>"1.8.5", :patchlevel=>"p115"},
-            {:engine=>"ruby", :version=>"1.8.4", :patchlevel=>"p999"},
-            {:engine=>"ruby", :version=>"1.8.3", :patchlevel=>"p999"},
-            {:engine=>"ruby", :version=>"1.8.2", :patchlevel=>"p999"},
-            {:engine=>"ruby", :version=>"1.8.1", :patchlevel=>"p999"},
-            {:engine=>"ruby", :version=>"1.8.0", :patchlevel=>"p999"},
-            {:engine=>"ruby", :version=>"1.6.999", :patchlevel=>"p999"}
-          ]
-
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2008_1891.rb

@@ -1,38 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-01-09
-			class CVE_2008_1891
-				include RubyVersionCheck
-
-				def initialize
-          message = "Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2, when using NTFS or FAT filesystems, allows remote attackers to read arbitrary CGI files via a trailing (1) + (plus), (2) %2b (encoded plus), (3) . (dot), (4) %2e (encoded dot), or (5) %20 (encoded space) character in the URI, possibly related to the WEBrick::HTTPServlet::FileHandler and WEBrick::HTTPServer.new functionality and the :DocumentRoot option."
-          
-          super({
-            :name=>"CVE-2008-1891",
-            :cvss=>"AV:N/AC:L/Au:N/C:P/I:N/A:N",
-            :release_date => Date.new(2008, 4, 18),
-            :cwe=>"22",
-            :owasp=>"A9", 
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
-            :message=>message,
-            :mitigation=>"Upgrade your ruby interpreter",
-            :aux_links=>["http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/"]
-          })
-
-          self.safe_rubies = [
-            {:engine=>"ruby", :version=>"1.9.0", :patchlevel=>"p2"}, 
-            {:engine=>"ruby", :version=>"1.8.7", :patchlevel=>"p22"}, 
-            {:engine=>"ruby", :version=>"1.8.6", :patchlevel=>"p230"}, 
-            {:engine=>"ruby", :version=>"1.8.5", :patchlevel=>"p231"},
-            {:engine=>"ruby", :version=>"1.8.4", :patchlevel=>"p999"},
-            {:engine=>"ruby", :version=>"1.8.3", :patchlevel=>"p999"},
-            {:engine=>"ruby", :version=>"1.8.2", :patchlevel=>"p999"},
-            {:engine=>"ruby", :version=>"1.8.1", :patchlevel=>"p999"},
-            {:engine=>"ruby", :version=>"1.8.0", :patchlevel=>"p999"}
-          ]
-
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2008_2376.rb

@@ -1,30 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-01-09
-			class CVE_2008_2376
-				include RubyVersionCheck
-
-				def initialize
-          message = "Integer overflow in the rb_ary_fill function in array.c in Ruby before revision 17756 allows context-dependent attackers to cause a denial of service (crash) or possibly have unspecified other impact via a call to the Array#fill method with a start (aka beg) argument greater than ARY_MAX_SIZE. NOTE: this issue exists because of an incomplete fix for other closely related integer overflows."
-
-          super({
-            :name=>"CVE-2008-2376",
-            :cvss=>"AV:N/AC:L/Au:N/C:P/I:P/A:P",
-            :release_date => Date.new(2008, 7, 9),
-            :cwe=>"189",
-            :owasp=>"A9", 
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
-            :message=>message,
-            :mitigation=>"Upgrade your ruby interpreter",
-            :aux_links=>["http://www.openwall.com/lists/oss-security/2008/07/02/3"]
-          })
-
-          self.safe_rubies = [
-            {:engine=>"ruby", :version=>"1.8.6", :patchlevel=>"p231"}
-          ]
-
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2008_2662.rb

@@ -1,33 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-01-09
-			class CVE_2008_2662
-				include RubyVersionCheck
-
-				def initialize
-          message = "Multiple integer overflows in the rb_str_buf_append function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors that trigger memory corruption, a different issue than CVE-2008-2663, CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. This CVE description should be regarded as authoritative, although it is likely to change."
-
-          super({
-            :name=>"CVE-2008-2662",
-            :cvss=>"AV:N/AC:L/Au:N/C:C/I:C/A:C",
-            :release_date => Date.new(2008, 6, 24),
-            :cwe=>"189",
-            :owasp=>"A9", 
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
-            :message=>message,
-            :mitigation=>"Upgrade your ruby interpreter",
-            :aux_links=>["http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/"]
-          })
-
-          self.safe_rubies = [
-            {:engine=>"ruby", :version=>"1.9.0", :patchlevel=>"p2"}, 
-            {:engine=>"ruby", :version=>"1.8.7", :patchlevel=>"p22"}, 
-            {:engine=>"ruby", :version=>"1.8.6", :patchlevel=>"p230"}, 
-            {:engine=>"ruby", :version=>"1.8.5", :patchlevel=>"p231"}
-          ]
-
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2008_2663.rb

@@ -1,32 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-01-09
-			class CVE_2008_2663
-				include RubyVersionCheck
-
-				def initialize
-          message="Multiple integer overflows in the rb_ary_store function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22 allow context-dependent attackers to execute arbitrary code or cause a denial of service via unknown vectors, a different issue than CVE-2008-2662, CVE-2008-2664, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change."
-
-          super({
-            :name=>"CVE-2008-2663",
-            :cvss=>"AV:N/AC:L/Au:N/C:C/I:C/A:C",
-            :release_date => Date.new(2008, 6, 24),
-            :cwe=>"189",
-            :owasp=>"A9", 
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
-            :message=>message,
-            :mitigation=>"Upgrade your ruby interpreter",
-            :aux_links=>["http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/"]
-          })
-
-          self.safe_rubies = [
-            {:engine=>"ruby", :version=>"1.9.0", :patchlevel=>"p2"}, 
-            {:engine=>"ruby", :version=>"1.8.7", :patchlevel=>"p22"}, 
-            {:engine=>"ruby", :version=>"1.8.6", :patchlevel=>"p230"}, 
-            {:engine=>"ruby", :version=>"1.8.5", :patchlevel=>"p231"}
-          ]
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2008_2664.rb

@@ -1,33 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-01-09
-			class CVE_2008_2664
-				include RubyVersionCheck
-
-				def initialize
-          message = "The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allows context-dependent attackers to trigger memory corruption via unspecified vectors related to alloca, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2725. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change."
-
-           super({
-            :name=>"CVE-2008-2664",
-            :cvss=>"AV:N/AC:L/Au:N/C:N/I:N/A:C",
-            :release_date => Date.new(2008, 6, 24),
-            :cwe=>"399",
-            :owasp=>"A9", 
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
-            :message=>message,
-            :mitigation=>"Upgrade your ruby interpreter",
-            :aux_links=>["http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/"]
-          })
-
-          self.safe_rubies = [
-            {:engine=>"ruby", :version=>"1.9.0", :patchlevel=>"p2"}, 
-            {:engine=>"ruby", :version=>"1.8.7", :patchlevel=>"p22"}, 
-            {:engine=>"ruby", :version=>"1.8.6", :patchlevel=>"p230"}, 
-            {:engine=>"ruby", :version=>"1.8.5", :patchlevel=>"p231"}
-          ]
-
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2008_2725.rb

@@ -1,31 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-01-09
-			class CVE_2008_2725
-				include RubyVersionCheck
-
-				def initialize
-          message = "Integer overflow in the (1) rb_ary_splice function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, and 1.8.7 before 1.8.7-p22; and (2) the rb_ary_replace function in 1.6.x allows context-dependent attackers to trigger memory corruption via unspecified vectors, aka the \"REALLOC_N\" variant, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2664. NOTE: as of 20080624, there has been inconsistent usage of multiple CVE identifiers related to Ruby. The CVE description should be regarded as authoritative, although it is likely to change."
-          super({
-            :name=>"CVE-2008-2725",
-            :cvss=>"AV:N/AC:L/Au:N/C:N/I:N/A:C",
-            :release_date => Date.new(2008, 6, 24),
-            :cwe=>"189",
-            :owasp=>"A9", 
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
-            :message=>message,
-            :mitigation=>"Upgrade your ruby interpreter",
-            :aux_links=>["http://www.ruby-lang.org/en/news/2008/06/20/arbitrary-code-execution-vulnerabilities/"]
-          })
-
-          self.safe_rubies = [
-            {:engine=>"ruby", :version=>"1.9.0", :patchlevel=>"p2"}, 
-            {:engine=>"ruby", :version=>"1.8.7", :patchlevel=>"p22"}, 
-            {:engine=>"ruby", :version=>"1.8.6", :patchlevel=>"p230"}, 
-            {:engine=>"ruby", :version=>"1.8.5", :patchlevel=>"p231"}
-          ]
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2008_3655.rb

@@ -1,37 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-01-09
-			class CVE_2008_3655
-				include RubyVersionCheck
-
-				def initialize
-          message = "Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly restrict access to critical variables and methods at various safe levels, which allows context-dependent attackers to bypass intended access restrictions via (1) untrace_var, (2) $PROGRAM_NAME, and (3) syslog at safe level 4, and (4) insecure methods at safe levels 1 through 3."
-
-          super({
-            :name=>"CVE-2008-3655",
-            :cvss=>"AV:N/AC:L/Au:N/C:P/I:P/A:P",
-            :release_date => Date.new(2008, 8, 13),
-            :cwe=>"20",
-            :owasp=>"A9", 
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
-            :message=>message,
-            :mitigation=>"Upgrade your ruby interpreter",
-            :aux_links=>["http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/"]
-          })
-
-          self.safe_rubies = [
-            {:engine=>"ruby", :version=>"1.9.0", :patchlevel=>"p0"}, 
-            {:engine=>"ruby", :version=>"1.8.6", :patchlevel=>"p287"}, 
-            {:engine=>"ruby", :version=>"1.8.5", :patchlevel=>"p999"}, 
-            {:engine=>"ruby", :version=>"1.8.4", :patchlevel=>"p999"}, 
-            {:engine=>"ruby", :version=>"1.8.3", :patchlevel=>"p999"}, 
-            {:engine=>"ruby", :version=>"1.8.2", :patchlevel=>"p999"}, 
-            {:engine=>"ruby", :version=>"1.8.1", :patchlevel=>"p999"}, 
-            {:engine=>"ruby", :version=>"1.8.0", :patchlevel=>"p999"}, 
-            {:engine=>"ruby", :version=>"1.6.999", :patchlevel=>"p0"}]
-
-				end
-			end
-		end
-	end

data/lib/dawn/kb/cve_2008_3657.rb

@@ -1,37 +0,0 @@
-	module Dawn
-		module Kb
-			# Automatically created with rake on 2014-01-09
-			class CVE_2008_3657
-				include RubyVersionCheck
-
-				def initialize
-          message = "The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not check \"taintness\" of inputs, which allows context-dependent attackers to bypass safe levels and execute dangerous functions by accessing a library using DL.dlopen."
-          
-          super({
-            :name=>"CVE-2008-3657",
-            :cvss=>"AV:N/AC:L/Au:N/C:P/I:P/A:P",
-            :release_date => Date.new(2008, 8, 13),
-            :cwe=>"20",
-            :owasp=>"A9", 
-            :applies=>["rails", "sinatra", "padrino"],
-            :kind=>Dawn::KnowledgeBase::RUBY_VERSION_CHECK,
-            :message=>message,
-            :mitigation=>"Upgrade your ruby interpreter",
-            :aux_links=>["http://www.ruby-lang.org/en/news/2008/08/08/multiple-vulnerabilities-in-ruby/"]
-          })
-
-          self.safe_rubies = [
-            {:engine=>"ruby", :version=>"1.9.0", :patchlevel=>"p0"}, 
-            {:engine=>"ruby", :version=>"1.8.6", :patchlevel=>"p287"}, 
-            {:engine=>"ruby", :version=>"1.8.5", :patchlevel=>"p999"}, 
-            {:engine=>"ruby", :version=>"1.8.4", :patchlevel=>"p999"}, 
-            {:engine=>"ruby", :version=>"1.8.3", :patchlevel=>"p999"}, 
-            {:engine=>"ruby", :version=>"1.8.2", :patchlevel=>"p999"}, 
-            {:engine=>"ruby", :version=>"1.8.1", :patchlevel=>"p999"}, 
-            {:engine=>"ruby", :version=>"1.8.0", :patchlevel=>"p999"}, 
-            {:engine=>"ruby", :version=>"1.6.999", :patchlevel=>"p0"}]
-
-				end
-			end
-		end
-	end