CVE-2014-1831
NONE EPSS 29.0%
Published Feb 19, 201511y ago · Modified Jun 17, 20262w ago
Published Feb 19, 2015 11y ago
Last Modified Jun 17, 2026 2w ago
Description
Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.
Threat Intelligence
EPSS Exploit Probability
29.0% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| phusion | passenger | * | ≤4.0.36 |
References 6
- lists.fedoraproject.org http://lists.fedoraproject.org/pipermail/package-announce/2015-February/149032.html
- openwall.com http://openwall.com/lists/oss-security/2014/01/28/8
- openwall.com http://openwall.com/lists/oss-security/2014/01/30/3
- bugs.debian.org https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=736958
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1058992
- github.com https://github.com/phusion/passenger/commit/34b1087870c2
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.