An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can use the PASV response to trick Net::FTP into connecting back to a given IP address and port. This potentially makes curl extract information about services that are otherwise private and not disclosed (e.g., the attacker can conduct port scans and service banner extractions).
References
Link | Resource |
---|---|
https://hackerone.com/reports/1145454 | Exploit Patch Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2021/10/msg00009.html | Mailing List Third Party Advisory |
https://lists.debian.org/debian-lts-announce/2023/04/msg00033.html | |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MWXHK5UUHVSHF7HTHMX6JY3WXDVNIHSL/ | |
https://security.gentoo.org/glsa/202401-27 | |
https://security.netapp.com/advisory/ntap-20210917-0001/ | Third Party Advisory |
https://www.oracle.com/security-alerts/cpuapr2022.html | Patch Third Party Advisory |
https://www.ruby-lang.org/en/news/2021/07/07/trusting-pasv-responses-in-net-ftp/ | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2021-07-13T00:00:00
Updated: 2024-01-24T05:06:36.810387
Reserved: 2021-04-26T00:00:00
Link: CVE-2021-31810
JSON object: View
NVD Information
Status : Modified
Published: 2021-07-13T13:15:09.243
Modified: 2024-01-24T05:15:09.683
Link: CVE-2021-31810
JSON object: View
Redhat Information
No data.
CWE