CVE-2013-2119 | BDVDB-2026-59142 Detail

Description#

Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service (prevent application start) or gain privileges by pre-creating a temporary "config" file in a directory with a predictable name in /tmp/ before it is used by the gem.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12014-01-02Record published in the CVE List.
2. Version 22024-08-06Most recent update recorded in the CVE List.