CVE-2009-4492
unknown
CVSS v3
—
CVSS v4 NEW
—
VIR risk
1.0
Description
WEBrick Improper Input Validation vulnerability
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Exploits
Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.
Exploit-DB
Ruby 1.9.1 - WEBrick 'Terminal Escape Sequence in Logs' Command Injection
source: https://www.securityfocus.com/bid/37710/info
Ruby WEBrick is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in log files.
Attackers can exploit this issue to execute arbitrary commands in a terminal.
Versions *prior to* the following are affected:
Ruby 1.8.6 patchlevel 388
Ruby 1.8.7 patchlevel 249
Ruby 1.9.1 patchlevel 378
The following example is available:
% xterm -e ruby -rwebrick -e 'WEBrick::HTTPServer.new(:Port=>8080).start' &
% wget http://www.example.com:8080/%1b%5d%32%3b%6f%77%6e%65%64%07%0aReferences
- https://github.com/advisories/GHSA-6mq2-37j5-w6r6
- https://nvd.nist.gov/vuln/detail/CVE-2009-4492
- https://github.com/ruby/webrick
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/webrick/CVE-2009-4492.yml
- https://web.archive.org/web/20100113155532/http://www.vupen.com/english/advisories/2010/0089
- https://web.archive.org/web/20100815010948/http://secunia.com/advisories/37949
- https://web.archive.org/web/20170402100552/http://securitytracker.com/id?1023429
- https://web.archive.org/web/20170908140655/http://www.securityfocus.com/archive/1/508830/100/0/threaded
- https://web.archive.org/web/20200228145937/http://www.securityfocus.com/bid/37710
- http://www.redhat.com/support/errata/RHSA-2011-0908.html
- http://www.redhat.com/support/errata/RHSA-2011-0909.html
- http://www.ruby-lang.org/en/news/2010/01/10/webrick-escape-sequence-injection
- http://www.ush.it/team/ush/hack_httpd_escape/adv.txt
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.