Vulnerabilities > CVE-2014-1832 - Incomplete Fix Insecure Temporary File Creation vulnerability in Ruby Phusion Passenger

CVSS 2.1 - LOW

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

local

low complexity

phusion

nessus

NVD

Published: 2015-02-19

Updated: 2015-02-20

Summary

Phusion Passenger 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-1831. <a href="http://cwe.mitre.org/data/definitions/61.html">CWE-61: UNIX Symbolic Link (Symlink) Following</a>

Vulnerable Configurations

Part	Description	Count
Application	Phusion Phusion Passenger 1.0.0 Phusion Passenger 1.0.1 Phusion Passenger 1.0.2 Phusion Passenger 1.0.3 Phusion Passenger 1.0.4 Phusion Passenger 1.0.5 Phusion Passenger 1.9.0 Phusion Passenger 1.9.1 Phusion Passenger 2.0.1 Phusion Passenger 2.0.2 Phusion Passenger 2.0.3 Phusion Passenger 2.0.4 Phusion Passenger 2.0.5 Phusion Passenger 2.0.6 Phusion Passenger 2.1.1 Phusion Passenger 2.1.2 Phusion Passenger 2.1.3 Phusion Passenger 2.2.0 Phusion Passenger 2.2.1 Phusion Passenger 2.2.2 Phusion Passenger 2.2.3 Phusion Passenger 2.2.4 Phusion Passenger 2.2.5 Phusion Passenger 2.2.6 Phusion Passenger 2.2.7 Phusion Passenger 2.2.8 Phusion Passenger 2.2.9 Phusion Passenger 2.2.10 Phusion Passenger 2.2.11 Phusion Passenger 2.2.12 Phusion Passenger 2.2.13 Phusion Passenger 2.2.14 Phusion Passenger 2.2.15 Phusion Passenger 3.0.0 Phusion Passenger 3.0.1 Phusion Passenger 3.0.2 Phusion Passenger 3.0.3 Phusion Passenger 3.0.4 Phusion Passenger 3.0.5 Phusion Passenger 3.0.6 Phusion Passenger 3.0.7 Phusion Passenger 3.0.8 Phusion Passenger 3.0.9 Phusion Passenger 3.0.10 Phusion Passenger 3.0.11 Phusion Passenger 3.0.12 Phusion Passenger 3.0.13 Phusion Passenger 3.0.14 Phusion Passenger 3.0.15 Phusion Passenger 3.0.16 Phusion Passenger 3.0.17 Phusion Passenger 3.0.18 Phusion Passenger 3.0.19 Phusion Passenger 3.0.20 Phusion Passenger 3.0.21 Phusion Passenger 3.9.0 Phusion Passenger 3.9.1 Phusion Passenger 3.9.2 Phusion Passenger 3.9.3 Phusion Passenger 3.9.4 Phusion Passenger 3.9.5 Phusion Passenger 4.0.0 Phusion Passenger 4.0.1 Phusion Passenger 4.0.2 Phusion Passenger 4.0.3 Phusion Passenger 4.0.4 Phusion Passenger 4.0.5 Phusion Passenger 4.0.6 Phusion Passenger 4.0.7 Phusion Passenger 4.0.8 Phusion Passenger 4.0.9 Phusion Passenger 4.0.10 Phusion Passenger 4.0.11 Phusion Passenger 4.0.12 Phusion Passenger 4.0.13 Phusion Passenger 4.0.14 Phusion Passenger 4.0.15 Phusion Passenger 4.0.16 Phusion Passenger 4.0.17 Phusion Passenger 4.0.18 Phusion Passenger 4.0.19 Phusion Passenger 4.0.20 Phusion Passenger 4.0.21 Phusion Passenger 4.0.22 Phusion Passenger 4.0.23 Phusion Passenger 4.0.24 Phusion Passenger 4.0.25 Phusion Passenger 4.0.26 Phusion Passenger 4.0.27 Phusion Passenger 4.0.28 Phusion Passenger 4.0.29 Phusion Passenger 4.0.30 Phusion Passenger 4.0.31 Phusion Passenger 4.0.32 Phusion Passenger 4.0.33 Phusion Passenger 4.0.34 Phusion Passenger 4.0.35 Phusion Passenger 4.0.36	247

Nessus

NASL family	Fedora Local Security Checks
NASL id	FEDORA_2015-1151.NASL
description	build for f20 (#1058993) Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
last seen	2020-06-05
modified	2015-02-04
plugin id	81153
published	2015-02-04
reporter	This script is Copyright (C) 2015-2020 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/81153
title	Fedora 20 : rubygem-passenger-4.0.53-3.fc20 (2015-1151)

Summary

Vulnerable Configurations

Nessus

References