Vulnerabilities > CVE-2014-1832 - Unspecified vulnerability in Phusion Passenger

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

phusion

nessus

NVD

Published: 2015-02-19

Updated: 2024-11-21

Summary

Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831.

Vulnerable Configurations

Part	Description	Count
Application	Phusion Phusion Passenger 1.0.0 Phusion Passenger 1.0.1 Phusion Passenger 1.0.2 Phusion Passenger 1.0.3 Phusion Passenger 1.0.4 Phusion Passenger 1.0.5 Phusion Passenger 1.9.0 Phusion Passenger 1.9.1 Phusion Passenger 2.0.1 Phusion Passenger 2.0.2 Phusion Passenger 2.0.3 Phusion Passenger 2.0.4 Phusion Passenger 2.0.5 Phusion Passenger 2.0.6 Phusion Passenger 2.1.1 Phusion Passenger 2.1.2 Phusion Passenger 2.1.3 Phusion Passenger 2.2.0 Phusion Passenger 2.2.1 Phusion Passenger 2.2.2 Phusion Passenger 2.2.3 Phusion Passenger 2.2.4 Phusion Passenger 2.2.5 Phusion Passenger 2.2.6 Phusion Passenger 2.2.7 Phusion Passenger 2.2.8 Phusion Passenger 2.2.9 Phusion Passenger 2.2.10 Phusion Passenger 2.2.11 Phusion Passenger 2.2.12 Phusion Passenger 2.2.13 Phusion Passenger 2.2.14 Phusion Passenger 2.2.15 Phusion Passenger 3.0.0 Phusion Passenger 3.0.1 Phusion Passenger 3.0.2 Phusion Passenger 3.0.3 Phusion Passenger 3.0.4 Phusion Passenger 3.0.5 Phusion Passenger 3.0.6 Phusion Passenger 3.0.7 Phusion Passenger 3.0.8 Phusion Passenger 3.0.9 Phusion Passenger 3.0.10 Phusion Passenger 3.0.11 Phusion Passenger 3.0.12 Phusion Passenger 3.0.13 Phusion Passenger 3.0.14 Phusion Passenger 3.0.15 Phusion Passenger 3.0.16 Phusion Passenger 3.0.17 Phusion Passenger 3.0.18 Phusion Passenger 3.0.19 Phusion Passenger 3.0.20 Phusion Passenger 3.0.21 Phusion Passenger 3.9.0 Phusion Passenger 3.9.1 Phusion Passenger 3.9.2 Phusion Passenger 3.9.3 Phusion Passenger 3.9.4 Phusion Passenger 3.9.5 Phusion Passenger 4.0.0 Phusion Passenger 4.0.1 Phusion Passenger 4.0.2 Phusion Passenger 4.0.3 Phusion Passenger 4.0.4 Phusion Passenger 4.0.5 Phusion Passenger 4.0.6 Phusion Passenger 4.0.7 Phusion Passenger 4.0.8 Phusion Passenger 4.0.9 Phusion Passenger 4.0.10 Phusion Passenger 4.0.11 Phusion Passenger 4.0.12 Phusion Passenger 4.0.13 Phusion Passenger 4.0.14 Phusion Passenger 4.0.15 Phusion Passenger 4.0.16 Phusion Passenger 4.0.17 Phusion Passenger 4.0.18 Phusion Passenger 4.0.19 Phusion Passenger 4.0.20 Phusion Passenger 4.0.21 Phusion Passenger 4.0.22 Phusion Passenger 4.0.23 Phusion Passenger 4.0.24 Phusion Passenger 4.0.25 Phusion Passenger 4.0.26 Phusion Passenger 4.0.27 Phusion Passenger 4.0.28 Phusion Passenger 4.0.29 Phusion Passenger 4.0.30 Phusion Passenger 4.0.31 Phusion Passenger 4.0.32 Phusion Passenger 4.0.33 Phusion Passenger 4.0.34 Phusion Passenger 4.0.35 Phusion Passenger 4.0.36	247

Nessus

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2015-1151.NASL
description	build for f20 (#1058993) Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-05
modified	2015-02-04
plugin id	81153
published	2015-02-04
reporter	This script is Copyright (C) 2015-2020 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/81153
title	Fedora 20 : rubygem-passenger-4.0.53-3.fc20 (2015-1151)

Summary

Vulnerable Configurations

Nessus

References