CVE

Id
69126  
CVE No.
CVE-2014-1831  
Status
Candidate  
Description
Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.  
Phase
Assigned (20140130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
664368 69126 CVE-2014-1831 MLIST:[oss-security] 20140128 CVE request: temporary file issue in Passenger rubygem  View
664369 69126 CVE-2014-1831 URL:http://openwall.com/lists/oss-security/2014/01/28/8  View
664370 69126 CVE-2014-1831 MLIST:[oss-security] 20140130 Re: CVE request: temporary file issue in Passenger rubygem  View
664371 69126 CVE-2014-1831 URL:http://openwall.com/lists/oss-security/2014/01/30/3  View
664372 69126 CVE-2014-1831 CONFIRM:https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736958  View
664373 69126 CVE-2014-1831 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1058992  View
664374 69126 CVE-2014-1831 CONFIRM:https://github.com/phusion/passenger/commit/34b1087870c2  View
664375 69126 CVE-2014-1831 FEDORA:FEDORA-2015-1151  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
12766 JVNDB-2014-001641 logilab-common の shellutils の Execute クラスにおける脆弱性 logilab-common の shellutils の Execute クラスは、tempfile.mktemp を使用するため、不特定の影響を受ける脆弱性が存在します。 CVE-2014-1839 69126 4.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001641.html  View