Lucene search
Veracode Vulnerability DatabaseVERACODE:11116HistoryJan 15, 2019 - 8:57 a.m.
Denial Of Service (DoS) Or Escalation Of Privileges
2019-01-1508:57:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.0004 Low
EPSS
Percentile
5.1%
Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service (prevent application start) or gain privileges by pre-creating a temporary config file in a directory with a predictable name in /tmp/ before it is used by the gem.
References
blog.phusion.nl/2013/05/29/phusion-passenger-3-0-21-released/
blog.phusion.nl/2013/05/29/phusion-passenger-4-0-5-released/
rhn.redhat.com/errata/RHSA-2013-1136.html
access.redhat.com/errata/RHSA-2013:1136
access.redhat.com/security/cve/CVE-2013-2119
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=892813
rhn.redhat.com/errata/RHSA-2013-1136.html
Related
nessus
nessus
Fedora 18 : rubygem-passenger-3.0.21-1.fc18 (2013-9789)
2013-07-12 00:00:00
Fedora 17 : rubygem-passenger-3.0.21-1.fc17 (2013-9771)
2013-07-12 00:00:00
Fedora 19 : rubygem-passenger-3.0.21-1.fc19 (2013-9748)
2013-07-12 00:00:00
openvas
openvas
Fedora Update for rubygem-passenger FEDORA-2013-9771
2013-06-13 00:00:00
Fedora Update for rubygem-passenger FEDORA-2013-9789
2013-06-13 00:00:00
Fedora Update for rubygem-passenger FEDORA-2013-9789
2013-06-13 00:00:00
github
github
Phusion Passenger Denial of Service
2017-10-24 18:33:37
fedora
fedora
[SECURITY] Fedora 18 Update: rubygem-passenger-3.0.21-1.fc18
2013-06-11 08:59:43
[SECURITY] Fedora 17 Update: rubygem-passenger-3.0.21-1.fc17
2013-06-11 09:11:47
[SECURITY] Fedora 19 Update: rubygem-passenger-3.0.21-1.fc19
2013-06-12 03:34:28
mageia
mageia
Updated rubygem-passenger package fixes CVE-2013-2119
2013-07-09 22:27:49
prion
prion
Design/Logic Flaw
2014-01-03 18:54:00
nvd
nvd
CVE-2013-2119
2014-01-03 18:54:11
cve
cve
CVE-2013-2119
2014-01-03 18:54:11
freebsd
freebsd
passenger -- security vulnerability
2013-05-29 00:00:00
ubuntucve
ubuntucve
CVE-2013-2119
2014-01-03 00:00:00
cvelist
cvelist
CVE-2013-2119
2014-01-02 21:00:00
osv
osv
Phusion Passenger Denial of Service
2017-10-24 18:33:37
rubygems
rubygems
CVE-2013-2119 rubygem-passenger: incorrect temporary file usage
2013-05-28 20:00:00
redhat
redhat
(RHSA-2013:1136) Moderate: rubygem-passenger security update
2013-08-05 00:00:00