CVE-2014-1832 Insecure use of temporary files in Phusion passenger
LowCVSS 2.1
EPSS 0.37%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems passenger(RubyGems) | = 4.0.37 | No fix listed |
| rubygems passenger(RubyGems) | >= 4.0.37, < 4.0.38 | 4.0.38 |
| phusion passenger | <= 4.0.36 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- bugs.debian.org
- bugzilla.redhat.com
- github.com vendor-advisory
- FEDORA-2015-1151 vendor-advisory
- [oss-security] 20140129 Re: CVE request: temporary file issue in Passenger rubygem mailing-list
- [oss-security] 20150130 Re: CVE request: temporary file issue in Passenger rubygem mailing-list
- github.com exploit
- github.com product
- Debian Security Tracker CVE-2014-1832 vendor-advisory