|
Ruby WEBrick Remote Directory Traversal and Information Disclosure Vulnerabilities
Ruby's WEBrick server is prone to remote directory-traversal and information-disclosure vulnerabilities. Successfully exploiting these issues allows remote attackers to access the contents of arbitrary files. Information harvested may aid in further attacks. These issues affect only operating systems that allow backslash (\) characters as path separators and operating systems that use case-insensitive filenames. This exposes Microsoft Windows and Apple Mac OS X operating systems to attack. |
|
|
Privacy Statement |
