• info
• discussion
• exploit
• solution
• references

Ruby WEBrick Remote Directory Traversal and Information Disclosure Vulnerabilities

Solution:
The vendor has released fixes to address these issues. Please see the references for more information.


Yukihiro Matsumoto Ruby 1.8.5 -p2

• Yukihiro Matsumoto ruby-1.8.5-p115.tar.gz
  ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.5-p115.tar.gz

Yukihiro Matsumoto Ruby 1.8.6

• Yukihiro Matsumoto ruby-1.8.6-p114.tar.gz
  ftp://ftp.ruby-lang.org/pub/ruby/1.8/ruby-1.8.6-p114.tar.gz

Yukihiro Matsumoto Ruby 1.9

• Yukihiro Matsumoto ruby-1.9.0-1-webrick-vulnerability-fix.diff
  ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.0-1-webrick-vulnerabilit y-fix.diff