Linux Distros Unpatched Vulnerability : CVE-2016-10345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local attackers to gain the...

SUSE-SU-2017:1316-1 Security update for rubygem-passenger

This update for rubygem-passenger fixes this security issue: - CVE-2016-10345: A known /tmp filename was used during passenger-install-nginx-module execution, which could have allowed local attackers to gain the privileges of the passenger user bsc1034594...

CVE-2016-10345

CVE-2016-10345 affects Phusion Passenger prior to 5.1.0, where a known /tmp filename used during passenger-install-nginx-module execution could allow a local attacker to gain the privileges of the passenger user. The vulnerability is local and depends on the /tmp filename handling during installa...