Contents

require 'brakeman/checks/base_check'

class Brakeman::CheckDigestDoS < Brakeman::BaseCheck
  Brakeman::Checks.add self

  @description = "Checks for digest authentication DoS vulnerability"

  def run_check
    message = "Vulnerability in digest authentication (CVE-2012-3424). Upgrade to Rails version "

    if version_between? "3.0.0", "3.0.15"
      message << "3.0.16"
    elsif version_between? "3.1.0", "3.1.6"
      message << "3.1.7"
    elsif version_between? "3.2.0", "3.2.5"
      message << "3.2.7"
    else
      return
    end

    if with_http_digest?
      confidence = CONFIDENCE[:high]
    else
      confidence = CONFIDENCE[:low]
    end

    warn :warning_type => "Denial of Service",
      :message => message,
      :confidence => confidence,
      :link_path => "https://groups.google.com/d/topic/rubyonrails-security/vxJjrc15qYM/discussion",
      :file => gemfile_or_environment
  end

  def with_http_digest?
    not tracker.find_call(:target => false, :method => [:authenticate_or_request_with_http_digest, :authenticate_with_http_digest]).empty?
  end
end

Version data entries

11 entries across 11 versions & 1 rubygems

Version	Path
brakeman-1.9.2	lib/brakeman/checks/check_digest_dos.rb
brakeman-1.9.1	lib/brakeman/checks/check_digest_dos.rb
brakeman-1.9.0	lib/brakeman/checks/check_digest_dos.rb
brakeman-1.9.0.pre2	lib/brakeman/checks/check_digest_dos.rb
brakeman-1.9.0.pre1	lib/brakeman/checks/check_digest_dos.rb
brakeman-1.8.3	lib/brakeman/checks/check_digest_dos.rb
brakeman-1.8.2	lib/brakeman/checks/check_digest_dos.rb
brakeman-1.8.1	lib/brakeman/checks/check_digest_dos.rb
brakeman-1.8.0	lib/brakeman/checks/check_digest_dos.rb
brakeman-1.7.1	lib/brakeman/checks/check_digest_dos.rb
brakeman-1.7.0	lib/brakeman/checks/check_digest_dos.rb