Ruby Directory Traversal Flaw in WEBrick Library Lets Remote Users View Files on the Target System.
|
|
SecurityTracker Alert ID: 1019562
|
|
SecurityTracker URL: http://securitytracker.com/id?1019562
|
|
CVE Reference: CVE-2008-1145
(Links to External Site)
|
Updated: Apr 1 2008
|
Original Entry Date: Mar 7 2008
|
Impact: Disclosure of system information, Disclosure of user information
|
Fix Available: Yes
Exploit Included: Yes
Vendor Confirmed: Yes
|
Version(s): 1.8.4 and prior versions; 1.8.5-p114 and prior 1.8.5.x versions; 1.8.6-p113 and prior 1.8.6.x versions; 1.9.0-1 and prior versions
|
Description: A vulnerability was reported in Ruby in the WEBrick web library. A remote user can view files on the target system.
The software does not properly validate user-supplied input. A remote user can supply a specially crafted request to view files
on target system that are located outside of the document directory.
A demonstration exploit URL is provided:
http://[target]:[port]/..%5c..%5c..%5c..%5c..%5c..%5c.
.%5c..%5c..%5c..%5c/boot.ini
A remote user can also view files that match the patterns specified by the ':NondisclosureName'
option on systems that have case insensitive filesystems.
The vendor was notified on February 20, 2008.
The original advisory
is available at:
http://milw0rm.com/exploits/5215
Digital Security Research Group reported this vulnerability.
|
Impact: A remote user can view files on the target system.
|
Solution: The vendor has issued a fix (1.8.5-p115, 1.8.6-p114).
A patch is available for version 1.9 at:
ftp://ftp.ruby-lang.org/pub/ruby/1.9/ruby-1.9.0-1-webrick-vulnerabilit
y-fix.diff
The vendor's advisory is available at:
http://www.ruby-lang.org/en/news/2008/03/03/webrick-file-access-vulnerability/
|
Vendor URL: www.ruby-lang.org/en/news/2008/03/03/webrick-file-access-vulnerability/ (Links to External Site)
|
Cause: Input validation error
|
Underlying OS: Linux (Any), UNIX (Any), Windows (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Fri, 7 Mar 2008 00:57:19 -0500
Subject: Ruby 1.8.6 (WEBrick Web server Toolkit and applications that used WEBrick, like Metasploit 3.1)
|
http://milw0rm.com/exploits/5215
|
|
