Ruby WEBrick vulnerable to directory traversal

Overview

Ruby WEBrick is vulnerable to a directory traversal on systems that support backslash (\) path separators. This vulnerability may allow an attacker to access arbitrary files outside of the web server root directory.

Description

WEBrick is a Ruby library program to build HTTP servers. WEBrick contains a directory traversal vulnerability in systems that accept backslash (\) as a path separator. A remote attacker may be able to exploit this vulnerability by using encoded backslash sequences (…%5c). For more information please see “File access vulnerability of WEBrick.”

---

Impact

A remote attacker could gain access to arbitrary files outside of the web server root directory.

---

Solution

Apply an Update

Ruby has released version 1.8.5-p115 and 1.8.6-p114 for the 1.8 series. For the 1.9 series, apply the patch referenced in “File access vulnerability of WEBrick.”

---

Vendor Information

404515

Filter by status: All Affected Not Affected Unknown

Filter by content: __ Additional information available

__ Sort by: Status Alphabetical

Expand all

Javascript is disabled. Click here to view vendors.

Ruby __ Affected

Updated: April 04, 2008

Status

Affected

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

Please see <http://www.ruby-lang.org/en/news/2008/03/03/webrick-file-access-vulnerability/&gt;.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23404515 Feedback>).

CVSS Metrics

Group	Score	Vector
Base
Temporal
Environmental

References

• <http://seclists.org/bugtraq/2008/Mar/0056.html&gt;
• <http://secunia.com/advisories/29232/&gt;
• <http://www.ruby-lang.org/en/news/2008/03/03/webrick-file-access-vulnerability/&gt;
• <http://www.securiteam.com/securitynews/5TP0F1PNQK.html&gt;

Acknowledgements

Thanks to Alexandr Polyakov for reporting this vulnerability.

This document was written by John Hollenberger.

Other Information

CVE IDs:	CVE-2008-1145
Severity Metric:	12.83 Date Public: