低危 Ruby 1.8.6/1.9 (WEBick Httpd 1.3.1) - 目录遍历

CVE编号

CVE-2008-1145

利用情况

POC 已公开

补丁情况

没有补丁

披露时间

2008-03-05
漏洞描述
在支持反斜杠(\)路径分隔符或不区分大小写的文件名的系统上运行时,在1.8.5-p115之前的 Ruby 1.8和1.8.6-p114以及1.9 through 1.9.0-1中的WEBrick中的目录遍历漏洞允许远程攻击者通过(1)“..%5c”(编码反斜杠)序列或(2)与NondisclosureName选项中的模式匹配的文件名来访问任意文件。

解决建议
建议您更新当前系统或软件至最新版,完成漏洞的修复。
参考链接
http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
http://secunia.com/advisories/29232
http://secunia.com/advisories/29357
http://secunia.com/advisories/29536
http://secunia.com/advisories/30802
http://secunia.com/advisories/31687
http://secunia.com/advisories/32371
http://support.apple.com/kb/HT2163
http://wiki.rpath.com/Advisories:rPSA-2008-0123
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0123
http://www.kb.cert.org/vuls/id/404515
http://www.mandriva.com/security/advisories?name=MDVSA-2008:141
http://www.mandriva.com/security/advisories?name=MDVSA-2008:142
http://www.redhat.com/support/errata/RHSA-2008-0897.html
http://www.ruby-lang.org/en/news/2008/03/03/webrick-file-access-vulnerability/
http://www.securityfocus.com/archive/1/489205/100/0/threaded
http://www.securityfocus.com/archive/1/489218/100/0/threaded
http://www.securityfocus.com/archive/1/490056/100/0/threaded
http://www.securityfocus.com/bid/28123
http://www.securitytracker.com/id?1019562
http://www.vupen.com/english/advisories/2008/0787
http://www.vupen.com/english/advisories/2008/1981/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41010
https://issues.rpath.com/browse/RPL-2338
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...
https://www.exploit-db.com/exploits/5215
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00338.html
https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00354.html
受影响软件情况
# 类型 厂商 产品 版本 影响面
1
运行在以下环境
应用 webrick webrick * Up to
(including)
1.8
运行在以下环境
应用 webrick webrick * Up to
(including)
1.8_p114
运行在以下环境
应用 webrick webrick * Up to
(including)
1.8_p115
运行在以下环境
应用 webrick webrick * Up to
(including)
1.9
运行在以下环境
应用 webrick webrick * Up to
(including)
1.9_1
运行在以下环境
系统 centos_5 ruby-libs * Up to
(excluding)
1.8.5-5.el5_2.5
运行在以下环境
系统 oracle_5 oraclelinux-release * Up to
(excluding)
1.8.5-5.el5_2.5
运行在以下环境
系统 redhat_5 irb * Up to
(excluding)
0:1.8.1-7.el4_7.1
运行在以下环境
系统 suse_11 ruby * Up to
(excluding)
1.8.7.p72-5.24
阿里云评分
3.8
  • 攻击路径
    远程
  • 攻击复杂度
    N/A
  • 权限要求
    无需权限
  • 影响范围
    有限影响
  • EXP成熟度
    POC 已公开
  • 补丁情况
    没有补丁
  • 数据保密性
    N/A
  • 数据完整性
    传输被破坏
  • 服务器危害
    无影响
  • 全网数量
    N/A
CWE-ID 漏洞类型
CWE-22 对路径名的限制不恰当(路径遍历)
阿里云安全产品覆盖情况