Skip to content
OpenAdvisories

Archive

19 February 2015

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low —

    Insecure use of temporary files in Phusion passenger

    Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831.

  • Low —

    Insecure use of temporary files in passenger

    Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.