Lucene search

K
freebsdFreeBSD1225549F-CA91-11E2-B3B8-F0DEF16C5C1B
HistoryMay 29, 2013 - 12:00 a.m.

passenger -- security vulnerability

2013-05-2900:00:00
vuxml.freebsd.org
16

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%

The Phusion reports:

A denial of service and arbitrary code execution by hijacking temp files. [CVE-2013-2119]

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchrubygem-passenger< 4.0.5UNKNOWN

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.1%