Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3

Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by benmmurphy on Monday January 28, 2013 @05:04PM (#5130969)

I have remote code execution working when YAML syck parser is being used. I've also got RCE working when psych is used (default in 1.9.x) using a similar trick to syck.

[ Parent | on HN ]

Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by vinhboy on Monday January 28, 2013 @05:38PM (#5131184)

I know you're not supposed to share these things, but I found it really useful how last time there were public PoC we could use to test our patches. Any such thing this time around?

[ Parent | on HN ]

Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by postmodern_mod3 on Monday January 28, 2013 @07:36PM (#5131663)

Here you go: https://gist.github.com/4660248

[ Parent | on HN ]

Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by vinhboy on Monday January 28, 2013 @08:38PM (#5131868)

thanks

[ Parent | on HN ]

Re:Vulnerability in JSON Parser in Ruby on Rails 3.0 and 2.3 by benmmurphy on Monday January 28, 2013 @05:49PM (#5131240)

postmodern just posted he found it on twitter. so i would expect public PoCs/metasploit code to be released soon.

[ Parent | on HN ]