PT-2012-5459

Name of the Vulnerable Software and Affected Versions Ruby versions 1.9.3 before patchlevel 286 Ruby versions 2.0.0 before r37163 Description The issue allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path. This is due to...