Any Ruby on Rails app is, badly, utterly, pwned through multiple parameter parsing bugs.

groups.google.com 09 Jan '13, 3am

Any Ruby on Rails app is, badly, utterly, pwned through multiple parameter parsing bugs.

Dieser Browser wird nicht unterstützt.

Full article: https://groups.google.com/forum/#!topic/rubyonrails-secur...

Tweets

@linukip » 11 Jan '13, 5am
Major vulnerability exploit for Ruby on Rails --> [link]
» 10 Jan '13, 4pm
Anyone else see performance degradation upgrading from 3.2.8 to 3.2.11? [link] Seems substantial.
@etooltech » 09 Jan '13, 11am
RT @emiliotorrens: Bug critico en #Rails que afecta a todas las versiones, mas info y como parchear aqui [link] #ruby #webdev #security #li
@emiliotorrens » 09 Jan '13, 11am
Bug critico en #Rails que afecta a todas las versiones, mas info y como parchear aqui [link] #ruby #webdev #security #li
@k_sec » 09 Jan '13, 9am
Using Ruby on Rails? Update! CVE-2013-0156 advisory here [link]
@monxas » 09 Jan '13, 8am
A la gente a la que le encanta ruby on rails, sólo había que esperar a que fuera conocido para que salgan bugs graves [link]
@zcobb » 09 Jan '13, 5am
RT @nilssonanders: Using Ruby on Rails? Upgrade now! Multiple vulnerabilities in parameter parsing in Action Pack - [link]
@nilssonanders » 09 Jan '13, 5am
Using Ruby on Rails? Upgrade now! Multiple vulnerabilities in parameter parsing in Action Pack - [link]
@gohsuket » 09 Jan '13, 3am
oops! RT @dragosr Any Ruby on Rails app is, badly, utterly, pwned through multiple parameter parsing bugs. [link]
@jtestart » 09 Jan '13, 3am
RT @dragosr: Any Ruby on Rails app is, badly, utterly, pwned through multiple parameter parsing bugs. [link]
@dragosr » 09 Jan '13, 3am
Any Ruby on Rails app is, badly, utterly, pwned through multiple parameter parsing bugs. [link]
@qxam » 09 Jan '13, 4am
RT @dragosr: Any Ruby on Rails app is, badly, utterly, pwned through multiple parameter parsing bugs. [link]
@rantyben » 09 Jan '13, 4am
RT @dragosr: Any Ruby on Rails app is, badly, utterly, pwned through multiple parameter parsing bugs. [link]
@MultiNetRo » 09 Jan '13, 3am
RT @dragosr Any Ruby on Rails app is, badly, utterly, pwned through multiple parameter parsing bugs. [link]
@malicethewitch » 09 Jan '13, 3am
RT @dragosr: Any Ruby on Rails app is, badly, utterly, pwned through multiple parameter parsing bugs. [link]
@torontogoat » 09 Jan '13, 3am
RT @dragosr: Any Ruby on Rails app is, badly, utterly, pwned through multiple parameter parsing bugs. [link]

Critical vulnerability in Ruby on Rails paramet...

h-online.com 09 Jan '13, 11am

The developers of Ruby on Rails are calling on users to update their Rails installations as soon as possible, following th...

Critical vulnerability in Ruby on Rails paramet...

h-online.com 09 Jan '13, 11am

The developers of Ruby on Rails are calling on users to update their Rails installations as soon as possible, following th...

Ruby on Rails に複数の脆弱性

jvn.jp 09 Jan '13, 3am

US-CERT Vulnerability Note VU#380039 Ruby on Rails contains multiple vulnerabilities in parameter parsing in the Action Pa...

Critical Flaws Patched in Ruby on Rails

threatpost.com 08 Jan '13, 9pm

"There are multiple weaknesses in the parameter parsing code for Ruby on Rails which allows attackers to bypass authentica...

Ruby on Rails patches more critical vulnerabili...

news.hitb.org 09 Jan '13, 10am

Those using the Ruby on Rails web application framework on their websites are being advised to update the software immedia...

New flaw in Ruby on Rails:

infosecurity-magazine.com 09 Jan '13, 1pm

Earlier today the Internet Storm Center (ISC) reported , “A SQL Injection Flaw (CVE-2012-5664) was announced last week (Ja...

Ruby dreams? Make that dream a reality! Start b...

skillcrush.com 08 Jan '13, 5pm

So you know your way around HTML & CSS. You’ve made your own website, and even tried implementing a jQuery plugin or two. ...

Ruby on Rails

insinuator.net 08 Jan '13, 9pm

As you might remember YAML formatted parameters are not enabled by default in Rails due to YAML (or more specifically the ...

Ruby on Rails pushing out 'extremely critical' ...

scmagazine.com.au 09 Jan '13, 2am

The maintainers of Ruby on Rails have pushed out the second update in a week to fix a critical hole in the framework which...

Ruby on Rails patches more critical vulnerabili...

infoworld.com 09 Jan '13, 12pm

Those using the Ruby on Rails Web application framework on their websites are being advised to update the software immedia...

Ruby on Rails 3.2.11 released to address 2 "ext...

news.softpedia.com 09 Jan '13, 10am

Less than one week has passed since Ruby on Rails 3.2.10 was released to address an SQL Injection vulnerability. However, ...

Critical Ruby on Rails flaws fixed, upgrade imm...

net-security.org 09 Jan '13, 2pm

For the second week in a row since the start of the new year, users of open source web application framework Ruby on Rails...

Ruby on Rails vulnerable to six year old flaw

zdnet.com 09 Jan '13, 1am

A critical vulnerability has been discovered in Ruby on Rails that affects almost every version of the framework. A contri...

Exploit Code for Ruby on Rails Flaw Likely on t...

threatpost.com 09 Jan '13, 4pm

The vulnerabilities patched Tuesday in the Ruby on Rails Web framework have security researchers warning of the potential ...

Ruby on Rails releases "extremely critical" fixes

scmagazine.com 09 Jan '13, 5pm

The maintainers of the Ruby on Rails have pushed out the second update in a week to fix critical holes in the web applicat...