• info
• discussion
• exploit
• solution
• references

Yukihiro Matsumoto Ruby XMLRPC Server Unspecified Command Execution Vulnerability

Ruby is affected by an unspecified command-execution vulnerability. Reportedly, this issue affects the XMLRPC server.

An attacker may exploit this issue to gain unauthorized access to an affected computer.

Ruby 1.8.2 is known to be vulnerable; other versions may be affected as well.