Ruby NewsThe latest news from Ruby-Lang.org.File access vulnerability of WEBrick- March 3, 2008 WEBrick, a standard library of Ruby to implement HTTP servers, has file access vulnerability. ImpactThe following programs are vulnerable. Programs that publish files using WEBrick::HTTPServer.new with the :DocumentRoot option Programs that publish files using WEBrick::HTTPServlet::FileHandler Affected systems are: Systems that accept backslash () as a path separator, such as Windows. Systems that use case insensitive filesystems such as NTFS on Windows, HFS on Mac OS X. This..http://www.ruby-lang.org/en/news/2008/03/03/webrick-file-access-vulnerability/ |