Ruby Directory Traversal Flaw in WEBrick Library Lets Remote Users View Files on the Target System.
|
|
SecurityTracker Alert ID: 1019562 |
|
SecurityTracker URL: http://securitytracker.com/id/1019562
|
|
CVE Reference:
CVE-2008-1145
(Links to External Site)
|
Updated: Apr 1 2008
|
Original Entry Date: Mar 7 2008
|
Impact:
Disclosure of system information, Disclosure of user information
|
Fix Available: Yes Vendor Confirmed: Yes Exploit Included: Yes
|
Version(s): 1.8.4 and prior versions; 1.8.5-p114 and prior 1.8.5.x versions; 1.8.6-p113 and prior 1.8.6.x versions; 1.9.0-1 and prior versions
|
Description:
A vulnerability was reported in Ruby in the WEBrick web library. A remote user can view files on the target system.
The software does not properly validate user-supplied input. A remote user can supply a specially crafted request to view files on target system that are located outside of the document directory.
A demonstration exploit URL is provided:
http://[target]:[port]/..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c/boot.ini
A remote user can also view files that match the patterns specified by the ':NondisclosureName' option on systems that have case insensitive filesystems.
The vendor was notified on February 20, 2008.
The original advisory is available at:
http://milw0rm.com/exploits/5215
Digital Security Research Group reported this vulnerability.
|
Impact:
A remote user can view files on the target system.
|
Solution:
The vendor has issued a fix (1.8.5-p115, 1.8.6-p114).
A patch is available for version 1.9 at:
ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.0-1-webrick-vulnerability-fix.diff
The vendor's advisory is available at:
http://www.ruby-lang.org/en/news/2008/03/03/webrick-file-access-vulnerability/
|
Vendor URL: www.ruby-lang.org/en/news/2008/03/03/webrick-file-access-vulnerability/ (Links to External Site)
|
Cause:
Input validation error
|
Underlying OS:
Linux (Any), UNIX (Any), Windows (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Fri, 7 Mar 2008 00:57:19 -0500
Subject: Ruby 1.8.6 (WEBrick Web server Toolkit and applications that used WEBrick, like Metasploit 3.1)
|
http://milw0rm.com/exploits/5215
|
|
