exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Toby Hsieh

Ruby on Rails Action View MIME Memory Exhaustion

Posted Aug 31, 2024

Authored by sinn3r, joev, Toby Hsieh | Site metasploit.com

This Metasploit module exploits a Denial of Service (DoS) condition in Action View that requires a controller action. By sending a specially crafted content-type header to a Rails application, it is possible for it to store the invalid MIME type, and may eventually consume all memory if enough invalid MIMEs are given. Versions 3.0.0 and other later versions are affected, fixed in 4.0.2 and 3.2.16.

tags | exploit, denial of service

advisories | CVE-2013-6414

SHA-256 | ab51a5c69c973f0ef025d78468148691dba860bd658962c6483b09479bf2f021

Download | Favorite | View