Directory traversal vulnerability in WEBrick in Ruby 1.8 before 1.8.5-p115 and 1.8.6-p114, and 1.9 through 1.9.0-1, when running on systems…

Exploit prediction (EPSS)

27.10% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

• EDB-5215 Ruby 1.8.6/1.9 (WEBick HTTPd 1.3.1) - Directory Traversal · remote · 2008-03-06

CVSS scores

Classification

Weakness

• CWE-22 Improper Limitation of a Pathname to a Restricted Directory

References

• lists.opensuse.org /opensuse-security-announce/2008-08/msg00006.html · vendor-advisory, x_refsource_SUSE, x_transferred
• wiki.rpath.com /wiki/Advisories:rPSA-2008-0123 · x_refsource_CONFIRM, x_transferred
• support.apple.com /kb/HT2163 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/29357 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securityfocus.com /archive/1/490056/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• kb.cert.org /vuls/id/404515 · third-party-advisory, x_refsource_CERT-VN, x_transferred
• securityfocus.com /bid/28123 · vdb-entry, x_refsource_BID, x_transferred
• mandriva.com /security/advisories?name=MDVSA-2008:141 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• securityfocus.com /archive/1/489205/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• vupen.com /english/advisories/2008/1981/references · vdb-entry, x_refsource_VUPEN, x_transferred
• exploit-db.com /exploits/5215 · exploit, x_refsource_EXPLOIT-DB, x_transferred
• secunia.com /advisories/29232 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/41010 · vdb-entry, x_refsource_XF, x_transferred
• secunia.com /advisories/31687 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• securityfocus.com /archive/1/489218/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• redhat.com /archives/fedora-package-announce/2008-March/msg00354.html · vendor-advisory, x_refsource_FEDORA, x_transferred
• redhat.com /support/errata/RHSA-2008-0897.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• lists.apple.com /archives/security-announce/2008//Jun/msg00002.html · vendor-advisory, x_refsource_APPLE, x_transferred
• ruby-lang.org /en/news/2008/03/03/webrick-file-access-vulnerability/ · x_refsource_CONFIRM, x_transferred
• vupen.com /english/advisories/2008/0787 · vdb-entry, x_refsource_VUPEN, x_transferred
• secunia.com /advisories/30802 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10937 · vdb-entry, signature, x_refsource_OVAL, x_transferred
• securitytracker.com /id?1019562 · vdb-entry, x_refsource_SECTRACK, x_transferred
• issues.rpath.com /browse/RPL-2338 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/32371 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• mandriva.com /security/advisories?name=MDVSA-2008:142 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• secunia.com /advisories/29536 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• redhat.com /archives/fedora-package-announce/2008-March/msg00338.html · vendor-advisory, x_refsource_FEDORA, x_transferred
• wiki.rpath.com /Advisories:rPSA-2008-0123 · x_refsource_CONFIRM, x_transferred

Sources

• CVE List: CVE-2008-1145
• NVD: CVE-2008-1145

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.