Exploitation Summary
EIP tracks 2 public exploits for CVE-2011-5331. PoCs published by Metasploit, tomquinn8.
AI-analyzed exploit summary This exploit targets a remote code execution vulnerability in Distributed Ruby (dRuby) by leveraging instance_eval and syscall methods to execute arbitrary commands. It attempts multiple techniques, including direct command injection and syscall-based file creation/execution, to achieve RCE on both 32-bit and 64-bit systems.
Description
Distributed Ruby (aka DRuby) 1.8 mishandles instance_eval.
Exploits (2)
This exploit targets a remote code execution vulnerability in Distributed Ruby (dRuby) by leveraging instance_eval and syscall methods to execute arbitrary commands. It attempts multiple techniques, including direct command injection and syscall-based file creation/execution, to achieve RCE on both 32-bit and 64-bit systems.
This exploit leverages Ruby's DRb (Distributed Ruby) to achieve remote code execution by bypassing instance_eval restrictions. It connects to a vulnerable DRb server and executes arbitrary commands via a shell.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H