SUSE CVE-2018-12027

An Insecure Permissions vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 causes information disclosure in the following situation: given a Passenger-spawned application process that reports that it listens on a certain Unix domain socket, if any of the parent directories of sa...

rubygem-passenger -- arbitrary file read vulnerability

Phusion reports: The cPanel Security Team discovered a vulnerability in Passenger that allows users to list the contents of arbitrary files on the system. CVE-2017-16355 has been assigned to this issue...

passenger -- security vulnerability

The Phusion reports: A denial of service and arbitrary code execution by hijacking temp files. CVE-2013-2119...

CVE-2002-0289

The CVE-2002-0289 issue affects the Phusion web server 1.0 and is caused by a buffer overflow in processing a long HTTP request. This vulnerability can enable a remote attacker to cause a denial of service and to execute arbitrary code on affected systems. The available sources (NVD/CVE entries) ...