CVE

Id
69127  
CVE No.
CVE-2014-1832  
Status
Candidate  
Description
Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831.  
Phase
Assigned (20140130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
664376 69127 CVE-2014-1832 MLIST:[oss-security] 20140129 Re: CVE request: temporary file issue in Passenger rubygem  View
664377 69127 CVE-2014-1832 URL:http://openwall.com/lists/oss-security/2014/01/29/6  View
664378 69127 CVE-2014-1832 MLIST:[oss-security] 20150130 Re: CVE request: temporary file issue in Passenger rubygem  View
664379 69127 CVE-2014-1832 URL:http://openwall.com/lists/oss-security/2014/01/30/3  View
664380 69127 CVE-2014-1832 CONFIRM:https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736958  View
664381 69127 CVE-2014-1832 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1058992  View
664382 69127 CVE-2014-1832 CONFIRM:https://github.com/phusion/passenger/commit/94428057c602da3d6d34ef75c78091066ecac5c0  View
664383 69127 CVE-2014-1832 FEDORA:FEDORA-2015-1151  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
12685 JVNDB-2014-001560 MyBB の Upload/search.php におけるクロスサイトスクリプティングの脆弱性 MyBB の Upload/search.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-1840 69127 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001560.html  View