Date: 07/13/06 (Java Web)    Keywords: no keywords

Two vulnerabilities have been reported in Ruby, which can be exploited to bypass safe level protection and replace methods called in trusted level as well as close untainted directory streams. 1. An error in the handling of the “alias” functionality can be exploited to bypass the safe level protection and replace methods called in the trusted [...]

Source: http://blog.taragana.com/index.php/archive/dual-ruby-vulnerabilities-and-how-to-fix/