EDB-32223
functionalRuby 1.9 dl - Module DL.dlopen Arbitrary Library Access
view exploit source exploit_dbverifiedtype remoteauthor Keita Yamaguchipublished 2008-08-11catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2008-3655US | high7.5 | Exploit | ||
Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not properly restrict access to critical variables and methods at various saf… | ||||
| CVE-2008-3657US | high7.5 | Exploit | ||
The dl module in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 does not check "taintness" of inputs, which allows context-depend… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan