CVE-2011-3187

The to_s method in actionpack/lib/action_dispatch/middleware/remote_ip.rb in Ruby on Rails 3.0.5 does not validate the X-Forwarded-For header in requests from IP addresses on a Class C network, which might allow remote attackers to inject arbitrary text into log files or bypass intended address parsing via a crafted header.

• CWE-20

• http://archives.neohapsis.com/archives/fulldisclosure/2011-02/0337.html
• http://webservsec.blogspot.com/2011/02/ruby-on-rails-vulnerability.htmlExploit
• http://www.openwall.com/lists/oss-security/2011/08/17/1Patch
• http://www.openwall.com/lists/oss-security/2011/08/19/11Patch
• http://www.openwall.com/lists/oss-security/2011/08/20/1Patch
• http://www.openwall.com/lists/oss-security/2011/08/22/13Patch
• http://www.openwall.com/lists/oss-security/2011/08/22/14Exploit
• http://www.openwall.com/lists/oss-security/2011/08/22/5Patch
• https://bugzilla.novell.com/show_bug.cgi?id=673010Exploit
• http://archives.neohapsis.com/archives/fulldisclosure/2011-02/0337.html
• http://webservsec.blogspot.com/2011/02/ruby-on-rails-vulnerability.htmlExploit
• http://www.openwall.com/lists/oss-security/2011/08/17/1Patch
• http://www.openwall.com/lists/oss-security/2011/08/19/11Patch
• http://www.openwall.com/lists/oss-security/2011/08/20/1Patch
• http://www.openwall.com/lists/oss-security/2011/08/22/13Patch
• http://www.openwall.com/lists/oss-security/2011/08/22/14Exploit
• http://www.openwall.com/lists/oss-security/2011/08/22/5Patch
• https://bugzilla.novell.com/show_bug.cgi?id=673010Exploit

Published

Aug 29, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3181Multiple cross-site scripting (XSS) vulnerabilities in the T…
• CVE-2011-3182PHP before 5.3.7 does not properly check the return values o…
• CVE-2011-3183A Cross-Site Scripting (XSS) vulnerability exists in the rcI…6.1
• CVE-2011-3184The msn_httpconn_parse_data function in httpconn.c in the MS…
• CVE-2011-3185gtkutils.c in Pidgin before 2.10.0 on Windows allows user-as…
• CVE-2011-3186CRLF injection vulnerability in actionpack/lib/action_contro…
• CVE-2011-3188The (1) IPv4 and (2) IPv6 implementations in the Linux kerne…9.1
• CVE-2011-3189The crypt function in PHP 5.3.7, when the MD5 hash type is u…
• CVE-2011-3190Certain AJP protocol connector implementations in Apache Tom…
• CVE-2011-3191Integer signedness error in the CIFSFindNext function in fs/…8.8
• CVE-2011-3192The byterange filter in the Apache HTTP Server 1.3.x, 2.0.x …
• CVE-2011-3193Heap-based buffer overflow in the Lookup_MarkMarkPos functio…