Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

[SECURITY] [DSA 4415-1] passenger security update

🗓️ 24 Mar 2019 11:02:30Reported by DebianType 
debian
 debian🔗 lists.debian.org👁 25 Views

Arbitrary file read vulnerability in passenger web application server allows local user to display content through passenger-status. Upgrade to version 5.0.30-1+deb9u1

Related
Packages
ReporterTitlePublishedViews
Family
FreeBSD		rubygem-passenger -- arbitrary file read vulnerability
13 Oct 201700:00
–freebsd
BDU FSTEC		The vulnerability in the Phusion Passenger web server relates to the possibility of creating a symbolic link between a REVISION file and an arbitrary file in the system. This allows a malicious actor to gain access to confidential data.
25 Apr 201900:00
–bdu_fstec
CNVD		Phusion Passenger Arbitrary File Read Vulnerability
18 Dec 201700:00
–cnvd
CVE		CVE-2017-16355
14 Dec 201722:00
–cve
Cvelist		CVE-2017-16355
14 Dec 201722:00
–cvelist
Debian		[SECURITY] [DSA 4415-1] passenger security update
24 Mar 201911:02
–debian
Debian CVE		CVE-2017-16355
14 Dec 201722:00
–debiancve
Tenable Nessus		Debian DSA-4415-1 : passenger - security update
25 Mar 201900:00
–nessus
Tenable Nessus		FreeBSD : rubygem-passenger -- arbitrary file read vulnerability (8cf25a29-e063-11e7-9b2c-001e672571bc)
19 Dec 201700:00
–nessus
Tenable Nessus		Ubuntu 16.04 ESM : Phusion Passenger vulnerabilities (USN-5261-1)
20 Oct 202300:00
–nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Debian9allruby-passenger-doc5.0.30-1+deb9u1ruby-passenger-doc_5.0.30-1+deb9u1_all.deb
Debian9mipsellibapache2-mod-passenger5.0.30-1+deb9u1libapache2-mod-passenger_5.0.30-1+deb9u1_mipsel.deb
Debian9mips64elpassenger-dbgsym5.0.30-1+deb9u1passenger-dbgsym_5.0.30-1+deb9u1_mips64el.deb
Debian9mipslibapache2-mod-passenger-dbgsym5.0.30-1+deb9u1libapache2-mod-passenger-dbgsym_5.0.30-1+deb9u1_mips.deb
Debian9i386libapache2-mod-passenger-dbgsym5.0.30-1+deb9u1libapache2-mod-passenger-dbgsym_5.0.30-1+deb9u1_i386.deb
Debian9armelpassenger5.0.30-1+deb9u1passenger_5.0.30-1+deb9u1_armel.deb
Debian9armelpassenger-dbgsym5.0.30-1+deb9u1passenger-dbgsym_5.0.30-1+deb9u1_armel.deb
Debian9armellibapache2-mod-passenger-dbgsym5.0.30-1+deb9u1libapache2-mod-passenger-dbgsym_5.0.30-1+deb9u1_armel.deb
Debian9amd64libapache2-mod-passenger5.0.30-1+deb9u1libapache2-mod-passenger_5.0.30-1+deb9u1_amd64.deb
Debian9armhfpassenger-dbgsym5.0.30-1+deb9u1passenger-dbgsym_5.0.30-1+deb9u1_armhf.deb
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
24 Mar 2019 11:02Current
1.2Low risk
Vulners AI Score1.2
EPSS0.00358
passengerarbitrary file readlocal userupgradecve-2017-16355debian bug 884463security update
25