Fileutils 0.7 Ruby Gem remote command execution and insecure file handling in /tmp

#792 · 2013-02-24

CVE ID(s): CVE-2013-2516

Summary: Ruby Gem Fileutils <= v0.7 Command Injection vulnerability

Notified: 2013-02-24

Description:

A set of utility classes to extract meta data from different file types.

Notes:

Download: http://rubygems.org/gems/fileutils

URL: http://www.vapid.dhs.org/advisories/file_utils_ruby_gem.html