CVE-2008-3655

This exploit demonstrates a security-bypass vulnerability in Ruby's safe level restrictions by manipulating string behavior in a multi-threaded context, allowing unauthorized actions. It exploits flaws in the 'safe level' implementation to bypass intended security constraints.

This exploit leverages a flaw in Ruby's 'dl' library to bypass safe level restrictions, allowing arbitrary function calls (e.g., 'system') even when $SAFE is set to 1. The PoC demonstrates a security bypass leading to remote code execution (RCE) by calling 'uname -rs' via the 'system' function.