Path traversal in RubyGems - CVE-2018-1000079

Vulnerability identifier: #VU11615

CSH Severity: Low

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-1000079

CWE-ID: CWE-22

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to modify file locations on the target system.

The weakness exists due to the improper handling of pathnames when the affected software installs new components. A remote attacker can persuade the victim into install a malicious RubyGems gem and use directory traversal techniques to write to arbitrary file locations.

RubyGems
Debian Linux
Amazon Linux AMI
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power
Opensuse
Fedora
EMC Integrated Data Protection Appliance
Dell EMC Data Protection Search
ruby

Update to version 2.7.6.

EMC Integrated Data Protection Appliance - update to 2.7.1
Dell EMC Data Protection Search - update to 19.6.0
ruby - addressed in versions 2.4.3-87.fc26, 2.4.3-87.fc27

• https://blog.rubygems.org/2018/02/15/2.7.6-released.html

• Multiple vulnerabilities in RubyGems
• Amazon Linux AMI update for ruby20, ruby22, ruby23, ruby24
• Debian update for jruby
• Debian update for ruby2.3
• Red Hat update for ruby
• Red Hat update for ruby
• Red Hat update for ruby
• Red Hat update for ruby
• OpenSUSE Linux update for ruby-bundled-gems-rpmhelper, ruby2.5
• Red Hat update for ruby
• Red Hat Enterprise Linux Server 7.4 update for ruby
• Red Hat Enterprise Linux 7.6 update for ruby
• Multiple vulnerabilities in Dell EMC Integrated Data Protection Appliance
• Multiple vulnerabilities in Dell EMC Data Protection Search
• Fedora 27 update for ruby
• Fedora 26 update for ruby