Security Advisory

CVE-2013-4136

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-09-30 19:00:00

Last updated 2024-09-17 03:38:39

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

ext/common/ServerInstanceDir.h in Phusion Passenger gem before 4.0.6 for Ruby allows local users to gain privileges or possibly change the ownership of arbitrary directories via a symlink attack on a directory with a predictable name in /tmp/.

← Browse all CVEs View on cve.org ↗