Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-1831

Опубликовано: 19 фев. 2015
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 2.1

Описание

Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.

РелизСтатусПримечание
devel

not-affected

4.0.37-2
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was not-affected [4.0.37-2]]
lucid

DNE

precise

DNE

quantal

ignored

end of life
saucy

ignored

end of life
trusty

not-affected

4.0.37-2
trusty/esm

DNE

trusty was not-affected [4.0.37-2]
upstream

released

4.0.33

Показывать по

EPSS

Процентиль: 21%
0.00067
Низкий

2.1 Low

CVSS2

Связанные уязвимости

redhat
около 12 лет назад

Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.

nvd
почти 11 лет назад

Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.

debian
почти 11 лет назад

Phusion Passenger before 4.0.37 allows local users to write to certain ...

github
больше 7 лет назад

Insecure use of temporary files in passenger

EPSS

Процентиль: 21%
0.00067
Низкий

2.1 Low

CVSS2