CVE-2013-0263 Rack arbitrary code execution via timing attack
Remote attackers can guess session cookies via timing attacks to gain privileges and execute arbitrary code in Rack applications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-0263?
CVE-2013-0263 is a medium-severity vulnerability in n/a, published on 8 Feb 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Rack::Session::Cookie in Rack 1.5.x before 1.5.2, 1.4.x before 1.4.5, 1.3.x before 1.3.10, 1.2.x before 1.2.8, and 1.1.x before 1.1.6 allows remote attackers to guess the session cookie, gain privileges, and execute arbitrary code via a timing attack involving an HMAC comparison function that does not run in constant time.
Which versions are affected by CVE-2013-0263?
10 open source packages ship an affected version, including rack. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
rack RubyGems | From 1.1.0 | 1.1.6 |
rack RubyGems | From 1.1.0 | 1.1.6 |
rack RubyGems | From 1.2.0 | 1.2.8 |
rack RubyGems | From 1.2.0 | 1.2.8 |
rack RubyGems | From 1.3.0 | 1.3.10 |
rack RubyGems | From 1.3.0 | 1.3.10 |
4 more packages
rack RubyGems | From 1.4.0 | 1.4.5 |
rack RubyGems | From 1.4.0 | 1.4.5 |
rack RubyGems | From 1.5.0 | 1.5.2 |
rack RubyGems | From 1.5.0 | 1.5.2 |
Products include Rack Project Rack.
How do I fix CVE-2013-0263?
Upgrade rack to a fixed version for your release line: 1.1.6, 1.2.8, 1.3.10 or 1.4.5.
Is CVE-2013-0263 being exploited?
There is no known exploitation of CVE-2013-0263 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2018-16470 Rack vulnerable to Denial of Service
- CVE-2013-0183 Rack rubygems receiving excessively long lines triggers out-of-memory error
- CVE-2011-5036 Rack Gem Subject to Denial of Service via Hash Collisions
- CVE-2012-6109 Rack vulnerable to REDoS
- CVE-2013-0184 Rack vulnerable to Denial of Service
Sources
Also known as DEBIAN-CVE-2013-0263, GHSA-xc85-32mf-xpv8, UBUNTU-CVE-2013-0263.