CVE-2009-5147 PoC — Ruby 安全漏洞

Source

Associated Vulnerability

Description

poc for CVE-2009-5147

Readme

CVE-2009-5147 and CVE-2015-7551 PoC

to run it:

````
make foo
export FOO=./foo.so
ruby -v foo.rb
````

with different versions of ruby you should get different results:

````
vpereira@kimura:~/poc> rvm use 2.1.7
vpereira@kimura:~/poc> ruby -v foo.rb
ruby 2.1.7p400 (2015-08-18 revision 51632) [x86_64-linux]
some trash fom your environment variables...

vpereira@kimura:~/poc> rvm use 2.3.0
vpereira@kimura:~/poc> ruby -v foo.rb
ruby 2.3.0p0 (2015-12-25 revision 53290) [x86_64-linux]
CVE-2009-5147 fixed
````

The file ```foo2.rb``` is for the CVE-2015-7551

File Snapshot

 [4.0K]  /data/pocs/ecd5b8d9766200c88e4da7c9b9d484f38daa16eb
├── [ 245]  foo2.rb
├── [  66]  foo.c
├── [ 240]  foo.rb
├── [  74]  Makefile
└── [ 560]  README.md

0 directories, 5 files

Remarks