VRT: The Ruby on Rails vulnerability that made Metasploit release a patch

#Exploit Info - VRT reviewed #Ruby on Rails vulnerability that made #Metasploit release a patch : https://t.co/5R6wV4ba

on the Ruby on Rails Security group January 8th contained a few phrases that cause alarm when used together: "inject arbitrary SQL", "inject and execute arbitrary code" and "perform a DoS attack on a Rails application". Without going into detail the post discussed how user-provided YAML and Symbol data could be crafted to exploit Rails applications and given the identifier CVE-2013-0156. Rails is used in many projects, including one of the most widespread pentesting frameworks available, Metasploit. Within hours of the post, Metasploit had a security update published for itself (2013010202 ) and was actively looking into creating a module for exploitation. The only information to go with before the PoC was released was that Rails could take YAML or Symbol input through xml that could potentially be abused. The worry was that specifying arbitrary classes for string and hash...

Full article: http://vrt-blog.snort.org/2013/01/the-ruby-on-rails-vulne...