Description

Phusion Passenger before 4.0.37 allows local users to write to certain files and directories via a symlink attack on (1) control_process.pid or a (2) generation-* file.

Remediation

References

CVE-2014-1831

Related Vulnerabilities

b2evolution Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3709)

Oracle Application Server CVE-2009-1011 Vulnerability (CVE-2009-1011)

Family Connections Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-3419)

WordPress Plugin Embed Swagger Cross-Site Scripting (1.0.0)

WordPress Plugin Wordfence Security-Firewall & Malware Scan Cross-Site Scripting (7.6.0)

Severity

Low

Classification

CVE-2014-1831

Tags

Missing Update Known Vulnerabilities