EUVD-2018-0570

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Phusion Passenger before 4.0.37 is vulnerable to local file write via symlink attack.

Reporter	Title	Published	Views	Family All 19
CNVD	Phusion Passenger Symbolic Link Attack Vulnerability (CNVD-2015-01246)	21 Feb 201500:00	–	cnvd
CVE	CVE-2014-1831	19 Feb 201515:00	–	cve
Cvelist	CVE-2014-1831	19 Feb 201515:00	–	cvelist
Debian CVE	CVE-2014-1831	19 Feb 201515:00	–	debiancve
Fedora	[SECURITY] Fedora 20 Update: rubygem-passenger-4.0.53-3.fc20	3 Feb 201512:03	–	fedora
Tenable Nessus	Fedora 20 : rubygem-passenger-4.0.53-3.fc20 (2015-1151)	4 Feb 201500:00	–	nessus
Github Security Blog	Insecure use of temporary files in passenger	10 Oct 201817:29	–	github
NVD	CVE-2014-1831	19 Feb 201515:59	–	nvd
OpenVAS	Fedora Update for rubygem-passenger FEDORA-2015-1151	4 Feb 201500:00	–	openvas
OSV	DEBIAN-CVE-2014-1831	19 Feb 201515:59	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "22d3e3b2-1d4b-3d11-8693-005551daa927",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "9dd4f85a-8146-3392-8f2d-c034f8b078d5",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-1831
github	www.github.com/phusion/passenger/commit/34b1087870c2
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/advisories/GHSA-c7j7-p5jq-26ff
github	www.github.com/phusion/passenger
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/passenger/CVE-2014-1831.yml
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-February/149032.html
openwall	www.openwall.com/lists/oss-security/2014/01/28/8
openwall	www.openwall.com/lists/oss-security/2014/01/30/3

07 Oct 2025 00:30Current

8.9High risk

Vulners AI Score8.9

CVSS 22.1

EPSS0.00067