9 matches found
cr-api-client (>=1.9.1, <=5.1.7), drb-impl-image (>=1.0.0a3, <=1.0.0b2) +33 more potentially affected by CVE-2022-40897 via setuptools (44.0.0)
setuptools PYPI version 44.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - cr-api-client =1.9.1, =1.0.0a3, =1.0.0b1, =1.0.2, =1.0.1, =4.9.0, =1.3.15.8, =0.6.2, =1.26.0, =1.26.0, =1.26.0, =1.28.0 and more Source cve...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data such that by launching the drbremotecodeexec exploit, a Metasploit Framework user will inadvertently expose Metasploit to the same deserialization issue that is exploited by that module, due to the...
PT-2021-12648
Name of the Vulnerable Software and Affected Versions: Metasploit Framework affected versions not specified Description: The issue arises when the drb remote codeexec exploit is launched, exposing Metasploit to a deserialization issue due to its reliance on vulnerable Distributed Ruby class...
CVE-2020-7385
By launching the drbremotecodeexec exploit, a Metasploit Framework user will inadvertently expose Metasploit to the same deserialization issue that is exploited by that module, due to the reliance on the vulnerable Distributed Ruby class functions. Since Metasploit Framework typically runs with...
drb-it.be Cross Site Scripting vulnerability OBB-1296407
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Ruby: DRb denial of service vulnerability
It is possible to crash the DRb server by providing malformed input. By following DRb example https://ruby-doc.org/stdlib-2.7.0/libdoc/drb/rdoc/DRb.htmlmodule-DRb-label-Server+code it was created the simple server and client code attached: drbserver.rb drbclient.rb client code was modified to...
Distributed Ruby (dRuby/DRb) Multiple RCE Vulnerabilities
Systems using Distributed Ruby dRuby/DRb, which is available in Ruby versions 1.6 and later, may permit unauthorized systems to execute distributed commands. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
ruby security update
1.8.7.352-13 - Workaround build issues against OpenSSL with enabled ECC curves. - Make DRb compatible with OpenSSL 1.0.1. ruby-1.9.3-p222-generate-1024-bits-RSA-key-instead-of-512-bits.patch - Fix CVE-2013-4164 Heap Overflow in Floating Point Parsing...
