Lucene search
RubySecRUBY:PASSENGER-2013-2119-93752HistoryMay 28, 2013 - 8:00 p.m.
CVE-2013-2119 rubygem-passenger: incorrect temporary file usage
2013-05-2820:00:00
RubySec
rubysec.com
22
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows
local users to cause a denial of service (prevent application start) or gain privileges
by pre-creating a temporary “config” file in a directory with a predictable name
in /tmp/ before it is used by the gem.
References
Related
nessus
nessus
Fedora 17 : rubygem-passenger-3.0.21-1.fc17 (2013-9771)
2013-07-12 00:00:00
Fedora 18 : rubygem-passenger-3.0.21-1.fc18 (2013-9789)
2013-07-12 00:00:00
Fedora 19 : rubygem-passenger-3.0.21-1.fc19 (2013-9748)
2013-07-12 00:00:00
veracode
veracode
Denial Of Service (DoS) Or Escalation Of Privileges
2019-01-15 08:57:15
openvas
openvas
Fedora Update for rubygem-passenger FEDORA-2013-9771
2013-06-13 00:00:00
Fedora Update for rubygem-passenger FEDORA-2013-9789
2013-06-13 00:00:00
Fedora Update for rubygem-passenger FEDORA-2013-9789
2013-06-13 00:00:00
github
github
Phusion Passenger Denial of Service
2017-10-24 18:33:37
fedora
fedora
[SECURITY] Fedora 18 Update: rubygem-passenger-3.0.21-1.fc18
2013-06-11 08:59:43
[SECURITY] Fedora 17 Update: rubygem-passenger-3.0.21-1.fc17
2013-06-11 09:11:47
[SECURITY] Fedora 19 Update: rubygem-passenger-3.0.21-1.fc19
2013-06-12 03:34:28
mageia
mageia
Updated rubygem-passenger package fixes CVE-2013-2119
2013-07-09 22:27:49
prion
prion
Design/Logic Flaw
2014-01-03 18:54:00
cve
cve
CVE-2013-2119
2014-01-03 18:54:11
ubuntucve
ubuntucve
CVE-2013-2119
2014-01-03 00:00:00
freebsd
freebsd
passenger -- security vulnerability
2013-05-29 00:00:00
cvelist
cvelist
CVE-2013-2119
2014-01-02 21:00:00
osv
osv
Phusion Passenger Denial of Service
2017-10-24 18:33:37
nvd
nvd
NVD:CVE-2013-2119
2014-01-03 18:54:11
redhat
redhat
(RHSA-2013:1136) Moderate: rubygem-passenger security update
2013-08-05 00:00:00
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
Related for RUBY:PASSENGER-2013-2119-93752