Red Hat Errata System 5.3 2008-01-23T07:18:13 Red Hat Enterprise Linux 3 Ruby is an interpreted scripting language for object-oriented programming. Andres Salomon reported an insecure file permissions flaw in the CGI session management of Ruby. FileStore created world readable files that could allow a malicious local user the ability to read CGI session data. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0755 to this issue. Users are advised to upgrade to this erratum package, which contains a backported patch to CGI::Session FileStore. Low Copyright 2004 Red Hat, Inc. CVE-2004-0755 cpe://redhat:enterprise_linux:3