CVE-2015-1855 PoC — Ruby OpenSSL extension 输入验证错误漏洞

Source

https://github.com/vpereira/CVE-2015-1855

Associated Vulnerability

Title:Ruby OpenSSL extension 输入验证错误漏洞 (CVE-2015-1855)
Description:verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attackers to spoof servers via vectors related to (1) multiple wildcards, (1) wildcards in IDNA names, (3) case sensitivity, and (4) non-ASCII characters.

Description

poc for CVE-2015-1855

Readme

reproducer for CVE-2015-1855

how to reproduce it:

create the necessary infra-structure

```
$ bash 1.sh
```

set the vulnerable ruby (my system ruby is vulnerable)

```
$ rvm use system
$ ruby -v 1.rb
$ ruby 2.1.2p95 (2014-05-08 revision 45877) [x86_64-linux-gnu]
true  # true means vulnerable
```

set the fixed ruby

```
$ rvm use 2.3.0
$ ruby -v 1.rb
ruby 2.3.0p0 (2015-12-25 revision 53290) [x86_64-linux]
false
```

File Snapshot


 [4.0K]  /data/pocs/f545c0fac46fda53168c4ec6b23055872becc4d8
├── [ 213]  1.rb
├── [ 479]  1.sh
└── [ 422]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!