CVE-2013-4136
Phusion Passenger < 4.0.6 - Privilege Escalation via Symlink Attack on Predictable /tmp Directory
Title source: llmDescription
ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/.
References (5)
Core 5
Core References
Various Sources x_refsource_confirm
https://github.com/phusion/passenger/blob/release-4.0.6/NEWS
Issue Tracking x_refsource_confirm
https://code.google.com/p/phusion-passenger/issues/detail?id=910
Patch x_refsource_confirm
https://github.com/phusion/passenger/commit/5483b3292cc2af1c83033eaaadec20dba4dcfd9b
Vendor Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2013-1136.html
Mailing List mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/07/16/6
Scores
EPSS
0.0004
EPSS Percentile
13.6%
Details
CWE
CWE-59
Status
published
Products (6)
phusion/passenger
4.0.1
phusion/passenger
4.0.2
phusion/passenger
4.0.3
phusion/passenger
4.0.4
phusion/passenger
< 4.0.5
rubygems/passenger
0 - 4.0.6RubyGems
Published
Sep 30, 2013
Tracked Since
Feb 18, 2026