PT-2012-6068 · Suse · Rubygem-Actionmailer+52

Published 2012-12-26 · Updated 2023-02-12 · CVE-2012-5664

PT

Уязвимость CVE-2012-5664

Exploit

Related Identifiers

CVE-2012-5664

OPENSUSE-SU-2013_0278-1

OPENSUSE-SU-2013_0280-1

SUSE-SU-2013_0486-1

Affected Products

Rubygem-Actionmailer

Rubygem-Actionmailer-2 3

Rubygem-Actionmailer-2 3-Doc

Rubygem-Actionmailer-2 3-Testsuite

Rubygem-Actionmailer-3 2

Rubygem-Actionmailer-3 2-Doc

Rubygem-Actionpack

Rubygem-Actionpack-2 3

Rubygem-Actionpack-2 3-Doc

Rubygem-Actionpack-2 3-Testsuite

Rubygem-Actionpack-3 2

Rubygem-Actionpack-3 2-Doc

Rubygem-Activemodel-3 2

Rubygem-Activemodel-3 2-Doc

Rubygem-Activerecord

Rubygem-Activerecord-2 3

Rubygem-Activerecord-2 3-Doc

Rubygem-Activerecord-2 3-Testsuite

Rubygem-Activerecord-3 2

Rubygem-Activerecord-3 2-Doc

Rubygem-Activeresource

Rubygem-Activeresource-2 3

Rubygem-Activeresource-2 3-Doc

Rubygem-Activeresource-2 3-Testsuite

Rubygem-Activeresource-3 2

Rubygem-Activeresource-3 2-Doc

Rubygem-Activesupport

Rubygem-Activesupport-2 3

Rubygem-Activesupport-2 3-Doc

Rubygem-Activesupport-3 2

Rubygem-Activesupport-3 2-Doc

Rubygem-Rack

Rubygem-Rack-1 1

Rubygem-Rack-1 1-Doc

Rubygem-Rack-1 1-Testsuite

Rubygem-Rack-1 2

Rubygem-Rack-1 2-Doc

Rubygem-Rack-1 2-Testsuite

Rubygem-Rack-1 3

Rubygem-Rack-1 3-Doc

Rubygem-Rack-1 3-Testsuite

Rubygem-Rack-1 4

Rubygem-Rack-1 4-Doc

Rubygem-Rack-1 4-Testsuite

Rubygem-Rails

Rubygem-Rails-2 3

Rubygem-Rails-2 3-Doc

Rubygem-Rails-3 2

Rubygem-Rails-3 2-Doc

Rubygem-Railties-3 2

Rubygem-Railties-3 2-Doc

Rubygem-Sprockets-2 2

Rubygem-Sprockets-2 2-Doc

References · 37

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rails_xml_yaml_code_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rails_json_yaml_code_exec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rails_secret_deserialization.rb · Exploit
• 🔥 https://github.com/bsodmike/rails-exploit-cve-2013-0156 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0276 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0277 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0156 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5664 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0155 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-5664 · Security Note
• https://bdu.fstec.ru/vul/2015-01308 · Security Note
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/rails_xml_yaml_scanner.rb · Note
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/rails_json_yaml_scanner.rb · Note
• https://bugzilla.novell.com/775653 · Note
• https://bugzilla.novell.com/798452 · Note