From: Kazuhiro NISHIYAMA <redmine@...>
Date: 2009-07-21T19:48:27+09:00
Subject: [ruby-core:24472] [Feature #1800] rubygems can replace system executable files

Feature #1800: rubygems can replace system executable files
http://redmine.ruby-lang.org/issues/show/1800

Author: Kazuhiro NISHIYAMA
Status: Open, Priority: Normal

Japanese blog http://wota.jp/ac/?date=20090604#p01 says,
gem has bin/ls and Gem::Specification#executables= ["ls"],
rubygem overwrites /usr/bin/ls without confirming.

I think this is potential security risk.


----------------------------------------
http://redmine.ruby-lang.org