Directory Traversal Vulnerability in WEBrick for Ruby Products
CVE-2008-1145
Currently unrated
What is CVE-2008-1145?
The WEBrick component in Ruby contains a directory traversal vulnerability that permits remote attackers to access arbitrary files on the server. This weakness exploits how the system handles backslash path separators and case-insensitive file systems. Attackers can potentially access sensitive data by manipulating file paths to include encoded sequences like '..%5c' or by matching specific filename patterns. This vulnerability emphasizes the importance of secure file handling practices in web servers and the need for timely software updates.