CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirect_to function.

Missing input sanitation in rubygem-actionpack allowed remote attackers to inject arbitrary HTTP headers via specially crafted URLs (CVE-2008-5189).

CVE-2008-5189: CGI header injection vulnerability

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote server is running the Ruby on Rails web application.
This version of Rails is reported to be vulnerable to a flaw in the way that it handles user-supplied input to the 'redirect_to()' function in the 'ActionController::Base' class.  An attacker exploiting this flaw would be able to inject arbitrary HTTP headers that could lead to cross-site request forgery (CSRF), cross-site scripting (XSS) and other attacks.

ID	Name	Product	Family	Severity
40123	openSUSE Security Update : rubygem-actionpack (rubygem-actionpack-327)	Nessus	SuSE Local Security Checks	medium
36945	Fedora 10 : rubygem-actionpack-2.1.1-2.fc10 (2009-2149)	Nessus	Fedora Local Security Checks	medium
35753	Fedora 9 : rubygem-actionpack-2.1.1-2.fc9 (2009-2179)	Nessus	Fedora Local Security Checks	medium
34987	openSUSE 10 Security Update : rubygem-actionpack (rubygem-actionpack-5816)	Nessus	SuSE Local Security Checks	medium
4764	Ruby on Rails < 2.0.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	medium

Detections

Analytics

CVE-2008-5189

medium

Tenable Plugins

medium

medium

medium

medium

medium