From: James Britt Date: 2006-10-26T04:49:33+09:00 Subject: Re: [SEC] Mongrel Temporary Fix For cgi.rb 99% CPU DoS Attack Wilson Bilkovich wrote: > On 10/25/06, Jacob Fugal wrote: > >> On 10/25/06, Zed A. Shaw wrote: >> > THE PATCH >> > >> > If you can't do the hot fix gem install, then there is also a patch >> > for cgi.rb attached to this e-mail. You can apply the patch with the >> > following process: >> > >> > 1) Find the original cgi.rb file in your install. Mine's in >> > /usr/lib/ruby/1.8 >> > 2) cd /usr/lib/ruby/1.8 >> > 3) sudo patch < ~/cgi_multipart_eof_fix.patch >> > >> > You can look at the patch. It's literally changing one line, so you >> > can edit by hand if you get really desperate. >> >> Looks like either you forgot the attachment, or maybe the mailing list >> software (or gateway bridge?) ate it. Can you please include the patch >> in the body of a response? Thanks! >> >> Jacob Fugal >> >> > > Here's the patch, inline: Zed also pointed me to Google groups http://groups.google.com/group/rubyonrails-talk/browse_frm/thread/8bbee5200ac4312c/87b5d92d513aa3ce#87b5d92d513aa3ce which has the patch attachment -- James Britt http://www.ruby-doc.org - Ruby Help & Documentation http://www.artima.com/rubycs/ - The Journal By & For Rubyists http://www.rubystuff.com - The Ruby Store for Ruby Stuff http://www.rubyaz.org - Hacking in the Desert