Added a check for CVE-2013-6421 (sprout remote code execution)

Changelog.md

@@ -17,6 +17,7 @@ _latest update: Tue Dec 17 08:12:19 CET 2013_
 * Added a check for CVE-2013-4478 (sup remote code execution)
 * Added a check for CVE-2013-4479 (sup remote code execution)
 * Added a check for CVE-2013-1812 (ruby-openid denial of service)
+* Added a check for CVE-2013-6421 (sprout remote code execution)
 
 
 

lib/codesake/dawn/kb/cve_2013_6421.rb

@@ -0,0 +1,30 @@
+module Codesake
+	module Dawn
+		module Kb
+			# Automatically created with rake on 2013-12-17
+			class CVE_2013_6421
+				include DependencyCheck
+
+				def initialize
+          message = "The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a (1) filename or (2) path."
+
+           super({
+            :name=>'CVE-2013-6421', 
+            :cvss=>"AV:N/AC:L/Au:N/C:P/I:P/A:P",  
+            :release_date => Date.new(2013, 12, 12),
+            :cwe=>"94", 
+            :owasp=>"A9",
+            :applies=>["rails", "padrino", "sinatra"],
+            :kind => Codesake::Dawn::KnowledgeBase::DEPENDENCY_CHECK,
+            :message => message,
+            :mitigation=>"Please upgrade sprout rubygem",
+            :aux_links => ["http://www.openwall.com/lists/oss-security/2013/12/03/1"]
+          })
+          self.safe_dependencies = [{:name=>"sprout", :version=>['0.7.247']}]
+
+
+				end
+			end
+		end
+	end
+end

lib/codesake/dawn/knowledge_base.rb

@@ -107,6 +107,7 @@
 require "codesake/dawn/kb/cve_2013_6415"
 require "codesake/dawn/kb/cve_2013_6416"
 require "codesake/dawn/kb/cve_2013_6417"
+require "codesake/dawn/kb/cve_2013_6421"
 
 
 module Codesake
@@ -250,6 +251,7 @@ def self.load_security_checks
           Codesake::Dawn::Kb::CVE_2013_6415.new, 
           Codesake::Dawn::Kb::CVE_2013_6416.new, 
           Codesake::Dawn::Kb::CVE_2013_6417.new, 
+          Codesake::Dawn::Kb::CVE_2013_6421.new, 
 
         ]
       end

lib/codesake/dawn/version.rb

@@ -1,6 +1,6 @@
 module Codesake
   module Dawn
-    VERSION   = "0.81.0"
+    VERSION   = "0.85"
     CODENAME  = "ElevatoR"
   end
 end

spec/lib/dawn/codesake_knowledgebase_spec.rb

@@ -452,4 +452,9 @@
     sc.should_not   be_nil
     sc.class.should == Codesake::Dawn::Kb::CVE_2013_1812
   end
+  it "must have test for CVE-2013-6421" do
+    sc = kb.find("CVE-2013-6421")
+    sc.should_not   be_nil
+    sc.class.should == Codesake::Dawn::Kb::CVE_2013_6421
+  end
 end