CVE-2014-1831

Phusion Passenger (before 4.0.37) is affected by CVE-2014-1831: local users can write to certain files and directories through a symlink attack targeting control_process.pid or a generation-* file. Described in NVD with a low severity (CVSSv2 base score 2.1) and local access prerequisite. Connect...

CVE-2014-1831

Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on 1 controlprocess.pid or a 2 generation- file...

CVE-2014-1831

Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on 1 controlprocess.pid or a 2 generation- file...

CVE-2014-1832

Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on 1 controlprocess.pid or a 2 generation- file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831...

CVE-2014-1832: Undefined Security Weakness

Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on 1 controlprocess.pid or a 2 generation- file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831...

PT-2015-3689

Name of the Vulnerable Software and Affected Versions Phusion Passenger versions prior to 4.0.37 Description The issue allows local users to write to certain files and directories via a symlink attack on 1 control process.pid or 2 a generation- file. Recommendations For versions prior to 4.0.37,...

PT-2015-3690

Name of the Vulnerable Software and Affected Versions Phusion Passenger version 4.0.37 Description The issue allows local users to write to certain files and directories via a symlink attack on 1 control process.pid or a 2 generation- file. This is due to an incomplete fix for a previous issue...

CVE-2014-1831: Undefined Security Weakness

Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on 1 controlprocess.pid or a 2 generation- file...

Fedora 20 : rubygem-passenger-4.0.53-3.fc20 (2015-1151)

build for f20 1058993 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable...

Fedora Update for rubygem-passenger FEDORA-2015-1151

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 20 Update: rubygem-passenger-4.0.53-3.fc20

Phusion Passenger=C2=AE is a web server and application server, designed to be fast, robust and lightweight. It takes a lot of complexity out of deploying web a pps, adds powerful enterprise-grade features that are useful in production, and makes administration much easier and less complex. It...

Siemens SCALANCE W Client Detection

Binary data 6775.prm...

Siemens SCALANCE W Access Point Detection

Binary data 6774.prm...

CVE-2014-1831 CVE-2014-1832 rubygem-passenger: insecure use of temporary files

'Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on 1 controlprocess.pid or a 2 generation- file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831.'...

CVE-2014-1831 CVE-2014-1832 rubygem-passenger: insecure use of temporary files

Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on 1 controlprocess.pid or a 2 generation- file...

CVE-2013-2119

Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service prevent application start or gain privileges by pre-creating a temporary "config" file in a directory with a predictable name in /tmp/ before it is used by the gem...

Design/Logic Flaw

Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service prevent application start or gain privileges by pre-creating a temporary "config" file in a directory with a predictable name in /tmp/ before it is used by the gem...

CVE-2013-2119

Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service prevent application start or gain privileges by pre-creating a temporary "config" file in a directory with a predictable name in /tmp/ before it is used by the gem...

UBUNTU-CVE-2013-2119

Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service prevent application start or gain privileges by pre-creating a temporary "config" file in a directory with a predictable name in /tmp/ before it is used by the gem...

CVE-2013-2119

Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service prevent application start or gain privileges by pre-creating a temporary "config" file in a directory with a predictable name in /tmp/ before it is used by the gem...