CVE-2011-1004 Path traversal in n/a
Local attackers can delete arbitrary files via symlink attacks in Ruby's FileUtils.remove_entry_secure method.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-1004?
CVE-2011-1004 is a medium-severity path traversal vulnerability in Ruby-Lang Ruby, published on 2 Mar 2011. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The FileUtils.remove_entry_secure method in Ruby 1.8.6 through 1.8.6-420, 1.8.7 through 1.8.7-330, 1.8.8dev, 1.9.1 through 1.9.1-430, 1.9.2 through 1.9.2-136, and 1.9.3dev allows local users to delete arbitrary files via a symlink attack.
Weakness: CWE-59
Which versions are affected by CVE-2011-1004?
It affects 1 product.
Products include Ruby-Lang Ruby.
How do I fix CVE-2011-1004?
Upgrade to a fixed version.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2011-1004 being exploited?
There is no known exploitation of CVE-2011-1004 in the wild and no public exploit code.
Other vulnerabilities in Ruby-Lang Ruby
Sources
Also known as GHSA-45wv-gc6w-fq7m.