CVE-2013-2512

The CVE-2013-2512 entry concerns the ftpd gem for Ruby (version 0.2.1). Affected component: the FTP command handling (LIST/NLST) that accepts arguments containing shell metacharacters. Root cause: improper sanitization allows remote attackers to execute arbitrary OS commands through crafted FTP t...