Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

ruby: object taint bypassing

Package(s):

ruby

CVE #(s):

CVE-2013-2065

Created:

May 17, 2013

Updated:

May 30, 2013

Description:

From the Ruby advisory:

There is a vulnerability in DL and Fiddle in Ruby where tainted strings can be used by system calls regardless of the $SAFE level set in Ruby.

Alerts:

(Log in to post comments)