Описание
Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ruby-passenger | fixed | 4.0.37-1 | package | |
| ruby-passenger | fixed | 3.0.13debian-1+deb7u2 | wheezy | package |
| passenger | fixed | 4.0.37-1 | package | |
| passenger | no-dsa | squeeze | package |
EPSS
Процентиль: 30%
0.00371
Низкий
Связанные уязвимости
ubuntu
больше 11 лет назад
Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.
redhat
больше 12 лет назад
Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.
nvd
больше 11 лет назад
Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.
EPSS
Процентиль: 30%
0.00371
Низкий