Описание
OS Command Injection in ftpd
The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic.
Пакеты
Наименование
ftpd
rubygems
Затронутые версииВерсия исправления
< 0.2.2
0.2.2
Связанные уязвимости
CVSS3: 9.8
nvd
около 5 лет назад
The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command argument within FTP protocol traffic.