# CVE-2009-5147 dlopen漏洞
==INFO==
CVE-2009-5147 and CVE-2015-7551 PoC to run it: ```` make foo export FOO=./foo.so ruby -v foo.rb ```` with different versions of ruby you should get different results: ```` vpereira@kimura:~/poc> rvm use 2.1.7 vpereira@kimura:~/poc> ruby -v foo.rb ruby 2.1.7p400 (2015-08-18 revision 51632) [x86_64-linux] some trash fom your environment variables... vpereira@kimura:~/poc> rvm use 2.3.0 vpereira@kimura:~/poc> ruby -v foo.rb ruby 2.3.0p0 (2015-12-25 revision 53290) [x86_64-linux] CVE-2009-5147 fixed ```` The file ```foo2.rb``` is for the CVE-2015-7551
==POC==
https://github.com/JustYoomoon/Exploit/blob/main/CVE-2009-5147.zip
© 版权声明
文章版权归作者所有,未经允许请勿转载。
THE END













请登录后查看评论内容