Описание
Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ruby-passenger | fixed | 4.0.37-1 | package | |
| ruby-passenger | fixed | 3.0.13debian-1+deb7u2 | wheezy | package |
| passenger | fixed | 4.0.37-1 | package | |
| passenger | no-dsa | squeeze | package |
EPSS
Процентиль: 31%
0.00371
Низкий
Связанные уязвимости
ubuntu
больше 11 лет назад
Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.
redhat
почти 13 лет назад
Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.
nvd
больше 11 лет назад
Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.
altlinux
больше 10 лет назад
ALT-PU-2016-3266: package `passenger` update to version 4.0.60-alt1
EPSS
Процентиль: 31%
0.00371
Низкий