cve/2017/CVE-2017-17405.md

CVE-2017-17405

Description

Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the "|" pipe character, the command following the pipe character is executed. The default value of localfile is File.basename(remotefile), so malicious FTP servers could cause arbitrary command execution.

POC

Reference

• https://hackerone.com/reports/294462
• https://www.exploit-db.com/exploits/43381/

Github

• https://github.com/20142995/pocsuite
• https://github.com/ARPSyndicate/cvemon
• https://github.com/BadAllOff/BadAllOff
• https://github.com/Fa1c0n35/Web-CTF-Cheatshee
• https://github.com/Namkin-bhujiya/JWT-ATTACK
• https://github.com/SexyBeast233/SecBooks
• https://github.com/Threekiii/Awesome-POC
• https://github.com/Threekiii/Vulhub-Reproduce
• https://github.com/Zxser/Web-CTF-Cheatsheet
• https://github.com/bakery312/Vulhub-Reproduce
• https://github.com/duckstroms/Web-CTF-Cheatsheet
• https://github.com/lnick2023/nicenice
• https://github.com/mengdaya/Web-CTF-Cheatsheet
• https://github.com/qazbnm456/awesome-cve-poc
• https://github.com/scumdestroy/pentest-scripts-for-dangerous-boys
• https://github.com/superlink996/chunqiuyunjingbachang
• https://github.com/w181496/Web-CTF-Cheatsheet
• https://github.com/xbl3/awesome-cve-poc_qazbnm456