From: Wilson Bilkovich <wilsonb@...>
Date: 2008-03-12T07:55:36+09:00
Subject: Re: Webrick directory traversal exploit on UNIX

On Tue, Mar 11, 2008 at 2:52 PM, Jos Backus <jos@catnook.com> wrote:
> DSecRG Advisory #DSECRG-08-026 aka -018 describes a remote directory traversal
>  exploit which appears to _only_ have been fixed for DOSISH systems using \'s.
>  See http://www.securityfocus.com/archive/1/489205 for details.
>
>  When one runs
>
>     telnet webrick-server
>     GET //../../../../../../../../../etc/passwd HTTP/1.0
>
>  /etc/passwd is shown (=bad). This means that e.g. ruby-1.8.5-p115 is still
>  vulnerable on UNIX.
>

The securityfocus link above appears to say that ONLY DOS-like systems
are affected, not the reverse, as you indicate.
Am I reading it incorrectly?