CVE-2008-1145: Path Traversal
Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems that support backslash (\) path separators or case-insensitive file names, allows remote attackers to access arbitrary files via (1) "..%5c" (encoded backslash) sequences or (2) filenames that match patterns in the :NondisclosureName option.
Other sources
http://www.ruby-lang.org/en/news/2008/03/03/webrick-file-access-vulnerability/
WEBrick, a standard library of Ruby to implement HTTP servers, has file access vulnerability.
1. Systems that accept backslash (\) as a path separator, such as Windows. 2. Systems that use case insensitive filesystems such as NTFS on Windows, HFS on Mac OS X.
Attacker can access private files by sending a url with url encoded backslash (\). This works only on systems that accept backslash as a path separator. Or they could bypass restrictions with case-insensitive filesystems.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1145?
CVE-2008-1145 is classified as a moderate severity vulnerability due to its potential to expose sensitive files.
How do I fix CVE-2008-1145?
To mitigate CVE-2008-1145, upgrade to a version of Ruby that is patched for this vulnerability, such as Ruby 1.8.6 or later.
Which versions of WEBrick are affected by CVE-2008-1145?
CVE-2008-1145 affects all versions of WEBrick prior to 1.8.6 and 1.9.0.
Is my Ruby installation vulnerable to CVE-2008-1145?
If you are using Ruby versions 1.8.0 to 1.8.5 or any version before 1.8.6, your installation may be vulnerable to CVE-2008-1145.
What is the impact of exploiting CVE-2008-1145?
Exploiting CVE-2008-1145 could allow an attacker to access arbitrary files on the server, leading to potential data exposure.