Lucene search

[email protected]CVE-2013-2119

HistoryJan 03, 2014 - 6:54 p.m.

CVE-2013-2119

2014-01-0318:54:11

CWE-264

[email protected]

web.nvd.nist.gov

phusion passenger

gem

denial of service

gain privileges

cve-2013-2119

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service (prevent application start) or gain privileges by pre-creating a temporary “config” file in a directory with a predictable name in /tmp/ before it is used by the gem.

Affected configurations

NVD

Node

phusionpassengerRange≤3.0.20

phusionpassengerMatch3.0.0

phusionpassengerMatch3.0.1

phusionpassengerMatch3.0.2

phusionpassengerMatch3.0.3

phusionpassengerMatch3.0.4

phusionpassengerMatch3.0.5

phusionpassengerMatch3.0.6

phusionpassengerMatch3.0.7

phusionpassengerMatch3.0.8

phusionpassengerMatch3.0.9

phusionpassengerMatch3.0.10

phusionpassengerMatch3.0.11

phusionpassengerMatch3.0.12

phusionpassengerMatch3.0.13

phusionpassengerMatch3.0.14

phusionpassengerMatch3.0.15

phusionpassengerMatch3.0.17

phusionpassengerMatch3.0.18

phusionpassengerMatch3.0.19

phusionpassengerMatch4.0.1

phusionpassengerMatch4.0.2

phusionpassengerMatch4.0.3

phusionpassengerMatch4.0.4

AND

ruby-langruby

Node

redhatopenshiftMatch1.0enterprise

CPENameOperatorVersion
phusion:passengerphusion passengerle3.0.20
phusion:passengerphusion passengereq3.0.0
phusion:passengerphusion passengereq3.0.1
phusion:passengerphusion passengereq3.0.2
phusion:passengerphusion passengereq3.0.3
phusion:passengerphusion passengereq3.0.4
phusion:passengerphusion passengereq3.0.5
phusion:passengerphusion passengereq3.0.6
phusion:passengerphusion passengereq3.0.7
phusion:passengerphusion passengereq3.0.8

CPE	Name	Operator	Version
phusion:passenger	phusion passenger	le	3.0.20
phusion:passenger	phusion passenger	eq	3.0.0
phusion:passenger	phusion passenger	eq	3.0.1
phusion:passenger	phusion passenger	eq	3.0.2
phusion:passenger	phusion passenger	eq	3.0.3
phusion:passenger	phusion passenger	eq	3.0.4
phusion:passenger	phusion passenger	eq	3.0.5
phusion:passenger	phusion passenger	eq	3.0.6
phusion:passenger	phusion passenger	eq	3.0.7
phusion:passenger	phusion passenger	eq	3.0.8